Veeam Agent for Microsoft Windows 安全漏洞

Veeam Agent for Microsoft Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Microsoft Windows version 6.3.1.1074 and earlier, which originates from a local system user being able to modi...

Vulnerability-Disclosure

CVE-2022-AVAST1 Arbitrary File Write that Leads to Defense Ev...

CVE-2019-7282

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685...

CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854: Improper Access Control

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

PT-2017-6529

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions prior to 1.3.3.10 Description The issue allows attackers to bypass intended access restrictions and modify directory entries. This is achieved through a crafted ldapmodrdn call. Recommendations For versions prior ...

JNDI: unauthenticated remote write access is permitted by default

The 1 JNDI service, 2 HA-JNDI service, and 3 HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly...

CVE-2005-3567

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...

CVE-2005-3567: Undefined Security Weakness

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...