261 matches found
CVE-2021-45389
A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...
CVE-2021-45389
A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...
PT-2022-12338 · Starwind · Starwind Command Center +1
Name of the Vulnerable Software and Affected Versions: StarWind SAN and NAS build 1578 StarWind Command Center build 6864 Description: A flaw was found with the JWT token, allowing a self-signed JWT token to be injected into the update manager and bypass the authentication process, thus escalatin...
Hitachi Energy PCM600 Update Manager
1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor: Hitachi Energy Equipment: PCM600 Update Manager Vulnerability: Improper Certificate Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass the certificate validation and install an untrusted software...
CVE-2021-22278
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
CVE-2021-22278
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
Design/Logic Flaw
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
CVE-2021-22278
CVE-2021-22278 describes an improper certificate validation in Hitachi Energy PCM600 Update Manager. Affected PCM600 Update Manager versions include 2.1, 2.1.0.4, 2.2, 2.2.0.1, 2.2.0.2, 2.2.0.23, 2.3.0.60, 2.4.20041.1, and 2.4.20119.2. According to the ICS advisory, exploitation could allow an ad...
CVE-2021-22278 Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
CVE-2021-22278: Improper Certificate Validation
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
PT-2021-14929 · Unknown · Pcm600 Update Manager
Name of the Vulnerable Software and Affected Versions: PCM600 Update Manager affected versions not specified Description: A certificate validation issue in the PCM600 Update Manager allows an attacker to install unwanted software packages on a computer with PCM600 installed. Recommendations: At t...
Abb Pcm600信任管理问题漏洞
The Abb Pcm600 is an easy-to-use tool from Abb Switzerland. For Protection and Control IED Manager simplifies the management of protection and control relays. A security vulnerability exists in the PCM600 Update Manager that stems from a certificate validation vulnerability in the PCM600 Update...
CVE-2021-22278
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed...
VMware vCenter Server Appliance Update Manager Directory Traversal Arbitrary File Deletion Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on affected installations of VMware vCenter Server Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Update Manager. The issue results from the lack of proper validation...
ManageEngine OpManager Smart Update Manager RCE
Binary data manageengineopmanagercve-2020-28653.nbin...
Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (CVE-2020-13434, CVE-2020-13435)
Summary A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender Vulnerability Details CVEID: CVE-2020-13435 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by flaw in the sqlite3ExprCodeTarget function in expr.c. By sending a specially-crafted request, a...
ZOHO ManageEngine OpManager Remote Code Execution Vulnerability
ZOHO ManageEngine OpManager is a network, server and virtualization monitoring software from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine OpManager Stable build before 125203, which can be exploited by attackers to remotely execute code via the Smart Update Manager SUM servlet...
CVE-2020-28653
Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...