CVE-2021-36745: Direct Request

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

CVE-2021-22535

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

CVE-2021-38124

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

CVE-2021-22535

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

CVE-2021-22535

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

Remote code execution

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

Security feature bypass

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

CVE-2021-38124

The CVE-2021-38124 entry concerns Micro Focus ArcSight Enterprise Security Manager (ESM) , affecting versions 7.0.2 through 7.5 . The connected documents confirm a Remote Code Execution vulnerability in ESM, with the vulnerability capable of being exploited remotely. The exact root cause, exploit...

CVE-2021-38124

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

CVE-2021-22535

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

CVE-2021-22535

CVE-2021-22535 affects Micro Focus Directory and Resource Administrator (DRA) prior to version 10.1 Patch 1 . The vulnerability is an unauthorized information disclosure vulnerability, impacting all pre-10.1 Patch 1 DRA releases. Red Hat and NVD entries align on the affected product and impact; n...

CVE-2021-38124: Improper Neutralization of Special Elements used in a Command

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

PT-2021-21957

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Enterprise Security Manager ESM versions 7.0.2 through 7.5 Description: The issue is a Remote Code Execution vulnerability in the Micro Focus ArcSight Enterprise Security Manager ESM product. This vulnerability could be...

CVE-2021-22535: Incorrect Authorization

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

PT-2021-15130

Name of the Vulnerable Software and Affected Versions Micro Focus Directory and Resource Administrator DRA versions prior to 10.1 Patch 1 Description The issue is related to an unauthorized information security disclosure, which could lead to unauthorized information disclosure. Recommendations F...

Directory And Resource Administrator 安全漏洞

Micro Focus Directory And Resource Administrator DRA is an enterprise management solution from Micro Focus UK. A security vulnerability exists in Micro Focus Directory and Resource Administrator DRA versions prior to 10.1 Patch 1 that could lead to unauthorized disclosure of information...

Trend Micro ServerProtect Authorization Issues Vulnerability

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is used to protect network-connected storage systems and block threats at the source. Trend Micro ServerProtect suffers from an authorization problem vulnerability that originates from an error in the...

Trend Micro ServerProtect Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Trend Micro ServerProtect. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ServerProtect console. The issue results from the lack of proper validation...

[SECURITY] Fedora 35 Update: mosquitto-2.0.12-1.fc35

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

Trend Micro HouseCall for Home Networks Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro HouseCall for Home Networks. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...