14181 matches found
Security Bulletin: Vulnerabilities in Golang Go affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift
Summary Golang Go is vulnerable to denial of service, obtaining sensitive information, HTTP request smuggling, and directory traversal which may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift. Vulnerability Details CVEID:CVE-2022-32149...
CVE-2022-42904: Improper Neutralization of Special Elements used in a Command
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...
CVE-2022-42904
CVE-2022-42904 affects Zoho ManageEngine ADManager Plus (versions up to 7151). The vulnerability allows an authenticated administrator to execute commands in the proxy settings, representing a potential remote/local command execution in the agent/management interface as described across multiple ...
HPESBNS04388 rev.1 - HPE NetBatch-Plus software, Local Unauthorized Access
Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Netbatch Plus T9189 T9189L01 - T9189L01^ABY; T9189H01 – T9189H01^ABW CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-37931 |...
PT-2022-16428
Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to obtain critical information due to an unauthenticated access vulnerability. Recommendations At the moment, there ...
CVE-2022-42904
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...
PT-2022-26655
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions through 7151 Description The issue allows authenticated admin users to execute commands in proxy settings. Recommendations For Zoho ManageEngine ADManager Plus versions through 7151, consider restricti...
ZOHO ManageEngine ADManager Plus has security vulnerabilities
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
CVE-2022-42904
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...
PT-2022-16429
Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to damage the page where the agents are listed due to an unauthenticated access vulnerability. Recommendations At th...
Code injection
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...
CVE-2022-42903: Missing Authorization
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...
CVE-2022-42903
Summary: CVE-2022-42903 affects Zoho ManageEngine SupportCenter Plus up to version 11.0 Build 11024. The issue allows low-privileged users to view the organization users list, indicating an access-control exposure. Affected product/versions (per provided documents): Zoho ManageEngine SupportCente...
CVE-2022-42903
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...
PT-2022-26654 · Zoho · Zoho Manageengine Supportcenter Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine SupportCenter Plus versions through 11024 Description: The issue allows low-privileged users to view the organization users list. Recommendations: For versions through 11024, update to a version that contains a fix for this...
ZOHO ManageEngine SupportCenter Plus has security vulnerabilities
ZOHO ManageEngine SupportCenter Plus is a Web-based customer support software from ZOHO, Inc. It is used to enable organizations to efficiently manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process. A security...
Windows GDI+ Unauthorized Access
The vulnerability of Windows GDI+ graphics device interfaces on Windows operating systems is related to insufficient protection of system data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created malicious file...
CVE-2022-3461
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
ManageEngine ServiceDesk Plus MSP exportMickeyList Improper Input Validation Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of ManageEngine ServiceDesk Plus MSP. Authentication is required to exploit this vulnerability. The specific flaw exists within the exportMickeyList action. The issue results from the lack of proper...