CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Access_manager_agent, Access_manager_agent_for_iis_5.0/6.0, Access_manager_server, Ace_agent, Ace_server, Adaptive_authentication, Adaptive_authentication_(on_premise), Archer, Archer_egrc_platform, Archer_grc_platform
2022-04-05
N/A
7.5 HIGH
The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks.
Access_manager_agent, Access_manager_agent_for_iis_5.0/6.0, Access_manager_server, Ace_agent, Ace_server, Adaptive_authentication, Adaptive_authentication_(on_premise), Archer, Archer_egrc_platform, Archer_grc_platform
2022-04-05
N/A
5.4 MEDIUM
Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and gets executed by the web browser in the context of the vulnerable web application.
Boundary, Consul, Consul_docker_image, Consul_template, Go-getter, Go-slug, Nomad, Packer, Sentinel, Terraform
2022-12-07
N/A
9.8 CRITICAL
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.
Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table. NOTE: this issue exists because of an incomplete fix for CVE-2020-10997.
Remote Desktop Protocol Client Information Disclosure Vulnerability.
A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205817 was assigned to this vulnerability.
Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26932, CVE-2022-26938.
Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26932, CVE-2022-26939.
Windows Network File System Remote Code Execution Vulnerability.
Windows Server Service Information Disclosure Vulnerability.