Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Privilege Escalation
SSRF
Proxmox
Virtual Environment
Proxmox Mail Gateway
+1
NVD
CVSS 3.1
9.8
EPSS
1.2%
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Access Appliance
Netbackup Flex Scale Appliance
Veritas
NVD
CVSS 3.1
9.8
EPSS
1.3%