Opto 22 groov View Server 安全漏洞

Opto 22 groov View Server is an industrial automation remote monitoring software from Opto 22, USA. A security vulnerability exists in Opto 22 groov View Server that originates from the users endpoint returning all users and their API keys, which could lead to information disclosure...

EUVD-2015-1892

Malware in sbrugna...

CVE-2023-2268: Missing Authorization

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users...

CVE-2022-29801

A vulnerability has been identified in Teamcenter V12.4 All versions V12.4.0.13, Teamcenter V13.0 All versions V13.0.0.9. The application contains a XML External Entity Injection XXE vulnerability. This could allow an attacker to view files on the application server filesystem...

CVE-2022-25312

An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...

Catalog Traversal Vulnerability in the Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading tourism industry chain service provider with high market share in China, and is the preferred brand of China's intelligent tourism informatization construction and regional tourism operation services. There is a directory...

Octopus Deploy Information Disclosure Vulnerability (CNVD-2020-27449)

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy versions prior to 2019.12.9 and 2020.1.12. An attacker could use the vulnerability to view server tasks that only...

Netsweeper Path Traversal Vulnerability

Netsweeper is a Web content filtering solution from Netsweeper Canada. A path traversal vulnerability exists in the webadmin/reporter/viewserverlog.php file in Netsweeper versions prior to 3.1.10, 4.0.x versions prior to 4.0.9, and 4.1.x versions prior to 4.1.2. The vulnerability stems from a...

PT-2020-7781

Name of the Vulnerable Software and Affected Versions: Netsweeper versions 3.1.10 and earlier, 4.0.x through 4.0.8, 4.1.x through 4.1.1 Description: The issue allows remote attackers to list directory contents via a .. dot dot in the log parameter in a stats action. This is due to a directory...

CVE-2015-1762

Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain...

PT-2015-2772

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2008 SP3 through 2014 Description The issue is related to the lack of forced blocking of access to uninitialized memory areas in Microsoft SQL Server, allowing remote authenticated users to execute arbitrary code ...

CVE-2015-1762: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain...

VMware View Server Detection

VMware View Server, formerly known as VMware Virtual Desktop Infrastructure, is installed on the remote host. VMware View Server is an OS virtual desktop solution for personalized virtual desktops as a managed service from a virtualized platform. C Tenable Network Security, Inc...

VMware View Server Directory Traversal Vulnerability (VMSA-2012-0017)

The version of VMware View Server installed on the remote host is potentially affected by a directory traversal vulnerability in the Connection Server and View Security Server. This may allow a remote attacker to read arbitrary files from the system. C Tenable Network Security, Inc...

VMware View critical directory traversal vulnerability

DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...

VMware Patches Directory Traversal Vulnerability in View Server and Security Server

Virtualization vendor VMware has patched a critical vulnerability in its VMware View desktop virtualization product that could have led to a directory traversal attack and an attacker reading or downloading files without the need for authentication. VMware View 5.x prior to 5.1.2 and 4.x prior to...

VMware View Server directory traversal

a. VMware View Server directory traversalVMware View contains a critical directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive information stored on the...

Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins

Overview WebLogic Server and WebLogic Express are application servers provided by Oracle formerly BEA Systems, Inc.. Plug-ins included in WebLogic Server and WebLogic Express contain a directory traversal vulnerability. WebLogic Server and WebLogic Express are application servers based on Java...