Authorization

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...

CVE-2022-35865

CVE-2022-35865 affects BMC Track-It! 20.21.2.109. The vulnerability arises from improper access control in the HTTP module’s authorization, enabling remote code execution in the service account context without authentication. It is linked to ZDI-CAN-16709. Public advisories note fixes in Track-It...

CVE-2022-35865

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-35865

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

EUVD-2022-38738

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-35864

This CVE affects BMC Track-It! version 20.21.02.109. The vulnerability is an SQL injection in the GetPopupSubQueryDetails endpoint caused by insufficient validation of a user-supplied string used to build queries, enabling disclosure of stored credentials. Exploitation requires authentication. Pu...

CVE-2022-35864

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...

BMC Community Track-It! SQL注入漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. for helpdesks and service desks with asset management. A SQL injection vulnerability exists in BMC Community Track-It! version 20.21.02.109, which stems from a lack of proper authentication before constructing a SQL query...

BMC Community Track-It! 访问控制错误漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. for helpdesks and service desks with asset management. An Access Control Error vulnerability exists in BMC Community Track-It! version 20.21.2.109, which stems from a lack of authentication before allowing access to...

qemu security update

15:4.2.1-18.el7 - block: introduce maxhwiov for use in scsi-generic Paolo Bonzini Orabug: 33785156 - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 Paolo Bonzini Orabug: 33785156 - block: add maxhwtransfer to BlockLimits Paolo Bonzini Orabug: 33785156 - block-backend:...

UBUNTU-CVE-2022-35651

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

[SECURITY] Fedora 35 Update: shellz-1.5.0-7.fc35

Shellz is a small utility to track and control your ssh, telnet, web and cust om shells and tunnels...

BMC Track-It! GetPopupSubQueryDetails SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper...

PT-2022-22975 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.02.109 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the...

PT-2022-22976 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.2.109 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the authorization of...

BMC Track-It! HTTP Module Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prio...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

GPAC 安全漏洞

GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...