| CVE-2022-33750 | NGHIÊM TRỌNG9.8 | CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands. | 16/06/2022 |
| CVE-2022-33739 | CAO7.5 | CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system. | 16/06/2022 |
| CVE-2022-28162 | THẤP3.3 | Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text. | 09/05/2022 |
| CVE-2022-28165 | CAO8.8 | A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are | 06/05/2022 |
| CVE-2022-28164 | TRUNG BÌNH6.5 | Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords. | 06/05/2022 |
| CVE-2022-28163 | NGHIÊM TRỌNG9.8 | In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. | 06/05/2022 |
| CVE-2022-28487 | CAO7.5 | Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. | 04/05/2022 |
| CVE-2022-27418 | CAO7.8 | Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. | 12/04/2022 |
| CVE-2022-27416 | CAO7.8 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. | 12/04/2022 |
| CVE-2005-10001 | TRUNG BÌNH6.1 | A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. | 28/03/2022 |
| CVE-2022-27942 | CAO7.8 | tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. | 26/03/2022 |
| CVE-2022-27941 | CAO7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. | 26/03/2022 |
| CVE-2022-27940 | CAO7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. | 26/03/2022 |
| CVE-2022-27939 | TRUNG BÌNH5.5 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. | 26/03/2022 |
| CVE-2022-25484 | TRUNG BÌNH5.5 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. | 22/03/2022 |
| CVE-2021-30650 | TRUNG BÌNH6.1 | A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into | 18/02/2022 |
| CVE-2022-23992 | NGHIÊM TRỌNG9.8 | XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges. | 14/02/2022 |
| CVE-2021-45387 | TRUNG BÌNH5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c. | 11/02/2022 |
| CVE-2021-45386 | TRUNG BÌNH5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c | 11/02/2022 |
| CVE-2022-22689 | CAO8.8 | CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands. | 04/02/2022 |