PT-2024-9754

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 21.0 MR1 21.0.1 Description A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall allows access to the reporting database and can lead to remote code execution if a specific...

Sophos Firewall 安全漏洞

Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in versions prior to Sophos Firewall 21.0 MR1 21.0.1. An attacker exploiting this vulnerability could remotely execute code...

Adobe Dreamweaver 20.0 < 21.0 Privilege Escalation (APSB20-55) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 21.0. It is, therefore, affected by a vulnerability as referenced in the APSB20-55 advisory. - Dreamweaver version 20.2 and earlier is affected by an uncontrolled search path element vulnerability that could lead to...

Adobe Dreamweaver 21.0 < 21.4 Arbitrary code execution (APSB24-39)

The version of Adobe Dreamweaver installed on the remote Windows host is prior to 21.4. It is, therefore, affected by a vulnerability as referenced in the APSB24-39 advisory. - Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CWE-78 potentially leading to...

Oracle Java SE Security Update (Apr 2024) -01 - Linux

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Security Update (Apr 2024) -04 - Linux

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-43574

CVE-2022-43574 affects IBM Robotic Process Automation (RPA) versions older than 21.0.6. The issue is an incorrect permission assignment that could allow unauthorized access to application configurations. The Red Hat IBM Security Bulletin confirms the vulnerability details, including the affected ...

CVE-2022-22490

CVE-2022-22490 affects IBM Robotic Process Automation (RPA) versions

CVE-2022-34338

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

CVE-2021-29835

IBM Business Automation Workflow (IBM Cloud Pak for Business Automation) is affected by CVE-2021-29835: cross-site scripting in the Web UI for versions 18.0–21.0. The root cause is improper handling of UI input leading to JavaScript injection, with potential credential exposure in a trusted sessi...

CVE-2021-21055

Adobe Dreamweaver versions 21.0 and earlier and 20.2 and earlier is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver...

CVE-2021-21008

Adobe Animate version 21.0 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Animate version 21.0 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Animate Uncontrolled Search Path Element Vulnerability

Adobe Animate is a multimedia authoring and computer animation program. An uncontrolled search path element vulnerability exists in Adobe Animate 21.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Animate 代码问题漏洞

Adobe Animate is a multimedia authoring and computer animation program. An uncontrolled search path element vulnerability exists in Adobe Animate 21.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2020-12872

yawsconfig.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0...

Design/Logic Flaw

yawsconfig.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0...

CVE-2020-12872

yawsconfig.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0...

CVE-2020-12872

yawsconfig.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0...