23 May 2022

5 results · Clear filters · Feed

• Medium 5.5
  CVE-2021-32958

  Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

  Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens f…

  Claroty Secure Remote Access (SRA) Site
  May 23, 2022
• Medium 5.4
  CVE-2022-0900

  Cross-Site Scripting Vulnerability in DivvyDrive

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from unspecified before v.4.6.2.0.

  NetDataSoft DivvyDrive
  May 23, 2022
• Medium 5.5
  CVE-2022-1825

  Cross-site Scripting (XSS) - Reflected in collectiveaccess/providence

  Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.

  collectiveaccess collectiveaccess/providence
  May 23, 2022
• Medium 4.3
  CVE-2022-28874

  Multiple Denial-of-Service (DoS) Vulnerabilities

  Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The explo…

  F-Secure F-Secure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security 64. F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithS Linux Windows
  May 23, 2022
• Medium 5.3
  CVE-2021-41834

  JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality c…

  jfrog artifactory
  May 23, 2022