31 matches found
EUVD-2022-49305
Malicious code in bioql PyPI...
CVE-2022-46501
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
CVE-2024-30300
Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability CWE-200 that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user...
CVE-2024-30299
Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application...
PT-2024-4226 · Adobe · Framemaker Publishing Server
Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker Publishing Server versions 2020.3, 2022.2 and earlier Description: The issue is related to insufficient protection of internal data, which could allow a remote attacker to elevate their privileges. An attacker could exploit...
Arm DS for Intel® SoC FPGA Software Advisory
Summary: Potential security vulnerabilities in some Arm Development Studio DS for Intel® System-on-a-Chip SoC FPGA software may allow escalation of privilege. Intel is releasing prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-43702Non-Intel...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
Design/Logic Flaw
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
Sql injection
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
Accruent LLC Maintenance Connection SQL注入漏洞
Accruent LLC Maintenance Connection is a comprehensive work order management, preventive maintenance program and parts inventory solution. A security vulnerability exists in Accruent LLC Maintenance Connection versions 2021 and 2022.2, which stems from an SQL injection during emailing to the work...
PT-2023-12890 · Intel · Intel Oneapi Dpc++/C++ Compiler +1
Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2022.1 IntelR oneAPI Toolkits versions prior to 2022.2 Description: The issue is related to insufficient visual distinction of homoglyphs presented to the user, which may allow an...
Intel OneApi Toolkits 代码问题漏洞
Intel OneApi Toolkits is a set of core tools and libraries from the United States Intel Intel. It is used to develop high-performance, data-centric applications across different architectures. A security vulnerability exists in IntelR oneAPI Base Toolkit versions prior to 2022.2, which stems from...
PT-2023-12847 · Intel · Intel Oneapi Toolkit +1
Name of the Vulnerable Software and Affected Versions: IntelR C++ Compiler Classic versions prior to 2021.6 IntelR oneAPI Toolkits versions prior to 2022.2 Description: The issue is related to improper handling of Unicode encoding in source code compiled by the IntelR C++ Compiler Classic. This m...
SolarWinds Security Event Manager 安全漏洞
SolarWinds Security Event Manager SolarWinds SEM is an American SolarWinds, Inc. for forensics and troubleshooting, as well as a tool to help you manage log data. A security vulnerability exists in SolarWinds Security Event Manager 2022.2 and prior versions that stems from disclosing HTTP methods...
Zentao Project Management System 17.0 Remote Code Execution Exploit
Exploit Title: Zentao Project Management System 17.0 - Authenticated Remote Code Execution Exploit Author: mister0xf Software Link: https://github.com/easysoft/zentaopms Version: tested on 17.0 probably works also on newer/older versions Tested On: Kali Linux 2022.2 Exploit Tested Using: Python...
PT-2022-24771 · Siemens · Parasolid +1
Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...
CVE-2022-37396
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution...
CVE-2022-37396
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution...