Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SSRF
Privilege Escalation
Proxmox Mail Gateway
Pve Http Server
Virtual Environment
NVD
CVSS 3.1
9.8
EPSS
1.2%
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Access Appliance
Netbackup Flex Scale Appliance
NVD
CVSS 3.1
9.8
EPSS
1.3%