240 matches found
CVE-2022-24251
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function...
CVE-2022-24255
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges...
Unrestricted file upload
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet...
Design/Logic Flaw
Argus Surveillance DVR v4.0 employs weak password encryption...
Unrestricted file upload
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function...
Hardcoded credentials
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges...
CVE-2022-24255
CVE-2022-24255 involves Extensis Portfolio v4.0, where hardcoded credentials enable an attacker to gain administrator privileges. The issue originates from credentials embedded in the product, enabling privileged access via a network attack with low complexity and no user interaction. Documented ...
CVE-2022-24255
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges...
CVE-2022-24254
An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file...
CVE-2022-24254
Affected software: Extensis Portfolio v4.0 (Backup/Restore Archive component). Issue: Unrestricted file upload via a crafted ZIP file that enables remote code execution. Root cause: lack of proper validation/constraints on uploaded ZIP contents within the Backup/Restore Archive module. Impact: re...
CVE-2022-24253
CVE-2022-24253 affects Extensis Portfolio v4.0 and is an authenticated unrestricted file upload vulnerability via the AdminFileTransferServlet. The described impact is partial confidentiality, integrity, and availability with network access and low attack complexity, requiring authentication of a...
CVE-2022-24253
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet...
CVE-2022-24252
CVE-2022-24252 concerns Extensis Portfolio v4.0, specifically the FileTransferServlet, with an unrestricted file upload vulnerability that enables remote code execution via a crafted file. Public sources in the connected set corroborate the issue and describe its impact as arbitrary code executio...
CVE-2022-24251
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function...
GSD-2022-1000301 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.267 by commit...
CVE-2022-23389
PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...
Remote code execution
PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...
Design/Logic Flaw
An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This...