ACRN Code Issues Vulnerabilities

ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...

Compliance When Migrating to the Cloud: SQL Server Running on Azure vs. On- Premise

In the age of the data era, where data storage is increasing at an exponential rate and access to information is getting easier and faster, data security is a major concern. There are many cases where we can’t prevent people from accessing data, but we can track and investigate suspicious...

Weak Password Vulnerability in PRTG Network Monitor

PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers and more. PRTG Network Monitor suffers from a weak password vulnerability, which can be exploited by attackers to log in to the backend and obtain sensitive...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-13938, CVE-2021-30641)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

Connectwise ConnectWise Automate SQL注入漏洞

Connectwise ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise Connectwise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in versions of ConnectWise Automate prior to...

br.com.labbs:quarkus-monitor (>=0.1.5 <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5 <=0.3.0) +1091 more potentially affected by CVE-2021-20293 via org.jboss.resteasy:resteasy-core (>=4.0.0.Beta6 <=4.6.0.Final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.Beta6, =0.1.5, =0.1.5, =1.8.0, =1.5.0, =1.5.0, =1.6.1, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =4.0, =4.0, =4.0, =4.0, =4.1.2 and more Source cves: CVE-2021-20293 Source...

June 15, 2021—KB5003698 (OS Build 18363.1645) Preview

None None...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-29754)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2021-29754 DESCRIPTION: IBM WebSphere Application...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...

PRTG Network Monitor < 22.1.74 CSRF Vulnerability

PRTG Network Monitor is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PRTG Network Monitor < 21.1.66.1623 Information Disclosure Vulnerability

PRTG Network Monitor is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

Cross site request forgery (csrf)

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

CVE-2021-34547 affects Paessler PRTG Network Monitor (version 20.1.55.1775) and is a CSRF flaw in the /editsettings endpoint that can lead to unintended user-creation actions. The description explicitly states a cross-site request forgery vulnerability in the web application, enabling an attacker...

Paessler PRTG Network Monitor 跨站请求伪造漏洞

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. PRTG Network Monitor suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a...

Xen 信息泄露漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. An information disclosure vulnerability exis...