Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
AFFECTED_PRODUCTS:
Meshcentral Meshcentral
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors....
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+44)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+44)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.
We have already fixed the vulnerability in the following versions:
Qsync Ce...
AFFECTED_PRODUCTS:
Qnap Qsync Central,
Qnap Qsync Central
An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and later
AFFECTED_PRODUCTS:
Qnap Photo Station
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and late...
AFFECTED_PRODUCTS:
Qnap Photo Station
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+13)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+13)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+15)
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.
We have already fixed the vulnerability in the fo...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.
We have already fixed the vulnerability in th...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.
We have already fixed the vulnerability in th...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+42)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+15)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+15)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+17)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+15)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
Q...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.
We have already fixed the vulnerability in the following ve...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 bu...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+11)
An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 bu...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+13)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 bui...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+13)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 202311...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+42)
An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network.
QTS 5.x, QuTS hero are not affected.
We have already fixed the vulnerabi...
AFFECTED_PRODUCTS:
Qnap QTS,
Qnap QTS,
Qnap QTS
... (+10)
Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted syste...
AFFECTED_PRODUCTS:
Dell Bsafe Ssl J,
Dell Bsafe Ssl J,
Dell Bsafe Crypto J
Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.
AFFECTED_PRODUCTS:
Dell Bsafe Micro Edition Suite
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Required Cryptographic Step Vulnerability.
AFFECTED_PRODUCTS:
Dell Bsafe Crypto C Micro Edition,
Dell Bsafe Micro Edition Suite
IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.
AFFECTED_PRODUCTS:
IBM Cloud Pak System,
IBM Cloud Pak System,
IBM Cloud Pak System
... (+1)
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.
AFFECTED_PRODUCTS:
IBM Tivoli Application Dependency Discovery Manager
A vulnerability was found in Nsasoft Network Sleuth 3.0.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit h...
AFFECTED_PRODUCTS:
Nsasoft Network Sleuth
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.This issue affects CyberMath: from v1.4 before v1.5.
AFFECTED_PRODUCTS:
Nationalkeep Cybermath
Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.This issue affects CyberMath: from v.1.4 before v.1.5.
AFFECTED_PRODUCTS:
Nationalkeep Cybermath
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.This issue affects CyberMath: from v.1.4 before v.1.5.
AFFECTED_PRODUCTS:
Nationalkeep Cybermath
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.This issue affects CyberMath: from v1.4 before v1.5.
AFFECTED_PRODUCTS:
Nationalkeep Cybermath
IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599.
AFFECTED_PRODUCTS:
IBM Spectrum Protect Plus
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
AFFECTED_PRODUCTS:
IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cac...
AFFECTED_PRODUCTS:
IBM Tivoli Application Dependency Discovery Manager
Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation.
AFFECTED_PRODUCTS:
Panterasoft Hdd Health
The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including, 1.2.52 due to insufficient input sanitization and output escaping on user supplied 'location' attribute. This makes it po...
AFFECTED_PRODUCTS:
Codepeople Calculated Fields Form
The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress is vulnerable to Local File Inclusion in version 2.1.6 via the ycfChangeElementData() function. This makes it possible for authenticated attackers, with administrator-level access and above, to include and execute arbitra...
AFFECTED_PRODUCTS:
Felixmoira Ai Popup
Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.
AFFECTED_PRODUCTS:
Xunruicms Xunruicms