19878 matches found
RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.1 (RHSA-2022:8917)
The remote Redhat Enterprise Linux 7 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8917 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of...
CVE-2022-2752
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...
Design/Logic Flaw
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...
CVE-2022-4264 Incorrect privilege assignment in M-Files Web Server
Incorrect Privilege Assignment in M-Files Web Classic in M-Files before 22.8.11691.0 allows low privilege user to change some configuration...
CVE-2022-4264 Incorrect privilege assignment in M-Files Web Server
Incorrect Privilege Assignment in M-Files Web Classic in M-Files before 22.8.11691.0 allows low privilege user to change some configuration...
CVE-2022-2752 Potential vulnerabilities in GM login process
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...
CVE-2022-2752
CVE-2022-2752 affects Secomea GateManager: vulnerable in the web server component for versions 9.4–9.7, enabling a local user to impersonate the previous user under certain failed login conditions. The connected sources confirm affected product and version range, describe the root cause as a logi...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection
CyberDanube Security Research 20221130-1 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed version| V2.5.2 CVE number| - impact| High homepage|...
PT-2022-18466 · Secomea · Secomea Gatemanager
Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions 9.4 through 9.7 Description: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. Recommendations: For Secomea...
CVE-2022-46826
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46826
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46825
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
CVE-2022-46825
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
Open redirect
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
Path traversal
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46826
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46826
CVE-2022-46826 affects JetBrains IntelliJ IDEA before 2022.3, where the built-in web server permits reading arbitrary files via a path traversal vulnerability. The issue stems from the built-in web server, allowing local access (verification via multiple sources) and has a remediation path: updat...
CVE-2022-46825
CVE-2022-46825 affects JetBrains IntelliJ IDEA prior to 2022.3. The vulnerability is that the built-in web server leaks information about open projects. The issue is supported by multiple sources (NVD/Red Hat/CVE entries and PT Security) and the documented remediation is to update to IntelliJ IDE...