1006 matches found
Security Bulletin: Financial Transaction Manager for Digital Payments is affected by a potential SQL Injection CVE-2020-4328
Summary Financial Transaction Manager for Digital Payments FTM DP for Multi-Platform has addressed the following vulnerability. SQL Injection on some of the screens. Vulnerability Details CVEID: CVE-2020-4328 DESCRIPTION: IBM Financial Transaction Manager is vulnerable to SQL injection. A remote...
CVE-2022-29092
Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...
github-action-merge-dependabot 数据伪造问题漏洞
github-action-merge-dependabot is used to automatically approve and merge dependabot PRs. A security vulnerability exists in github-action-merge-dependabot versions prior to 3.2.0, which stems from the fact that it does not check whether commits created by dependabot are verified with the correct...
ai.tripl:arc-jupyter_2.11 (>=0.0.13 <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3 <=1.15.0) +37 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (>=0.7.1 <=3.2.0)
com.microsoft.azure:azure-eventhubs MAVEN version =0.7.1, =0.0.13, =1.13.3, =1.31.1, =1.20.0, =1.31.1, =1.4.0, =0.1.0, =0.6.0, =0.7.2, =3.0.0, =2.2.0, =2.3.15, =2.3.17 - com.microsoft.azure:spark-streaming-eventhubs2.11 =2.0.3 and more Source cves: CVE-2020-16971 Source advisory:...
GHSA-QRF6-H5FC-7M96 Mattermost Server does not enforce rate limits on password change attempts
An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...
Mattermost Server does not enforce rate limits on password change attempts
An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...
Mattermost Server is vulnerable to Uncontrolled Resource Consumption
An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang...
Security Bulletin: IBM Cloud Private is vulnerable to server-side request forgery due to Python (CVE-2021-29921)
Summary There is a vulnerability in Python open source used by IBM Cloud Private for scripting. The vulnerability could be exploited by an attacker to conduct SSRF or local file include attacks. This bulletin identifies the security fixes to apply to address the Python vulnerability CVE-2021-2992...
com.github.arucard21.simplyrestful:simplyrestful-jetty (=0.5), com.github.arucard21.simplyrestful:simplyrestful-spring-boot (=0.2) +216 more potentially affected by CVE-2017-12624 via org.apache.cxf:cxf-core (=3.2.0)
org.apache.cxf:cxf-core MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-core and may be impacted: - com.github.arucard21.simplyrestful:simplyrestful-jetty =0.5 -...
com.aerse:gcless (=11.2), com.aerse:spring-security-taglib (=1.1) +344 more potentially affected by CVE-2014-0097 via org.springframework.security:spring-security-core (>=3.2.0.RELEASE <=3.2.1.RELEASE)
org.springframework.security:spring-security-core MAVEN version =3.2.0.RELEASE, =3.3.2, =1.0.6, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =1.8.2, =1.8.3 and more Source cves: CVE-2014-0097 Source advisory: OSV:GHSA-GV9V-C375-HVMG...
CVE-2022-27360
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment...
SpringBlade SQL注入漏洞
SpringBlade is a microservices development platform from China's Bread Networks Technology Company. A security vulnerability exists in SpringBlade v3.2.0 and earlier versions, which can be exploited by attackers to conduct SQL injection attacks via the component customSqlSegment...
admin-tool-button (>=1.0.1a0 <=1.0.5a0), aimmo (>=2.0.0 <=2.0.1) +71 more potentially affected by CVE-2022-28347 via django (>=3.2.0 <=3.2.12)
django PYPI version =3.2.0, =1.0.1a0, =2.0.0, =0.2.0, =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =6.0.0, =6.0.0, =6.4.1 - coldfront =1.1.0 - common-framework =2021.4.1 - directory-validators =9.0.0 and more Source cves: CVE-2022-28347 Source advisory: OSV:GHSA-W24H-V9QH-8GXJ...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +840 more potentially affected by CVE-2022-26612 via org.apache.hadoop:hadoop-common (>=3.2.0 <=3.2.2)
org.apache.hadoop:hadoop-common MAVEN version =3.2.0, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.4.0, =1.4.0, =1.7.0 and more Source cves: CVE-2022-26612 Source advisory: OSV:GHSA-GX2C-FVHC-PH4J...
city.smartb.f2:f2-spring-boot-starter-function (>=0.2.2 <=0.6.0), city.smartb.f2:f2-spring-boot-starter-function-http (>=0.2.2 <=0.6.0) +412 more potentially affected by CVE-2022-22963 via org.springframework.cloud:spring-cloud-function-context (>=3.2.0 <=3.2.2)
org.springframework.cloud:spring-cloud-function-context MAVEN version =3.2.0, =0.2.2, =0.2.2, =0.2.2, =0.2.0, =0.2.0, =0.2.0, =0.5.0, =0.2.0, =0.2.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 and more Source cves: CVE-2022-22963 Source advisory: OSV:GHSA-6V73-FGF6-W5J7...
CVE-2022-26174
A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...
Beekeeper Studio 代码注入漏洞
Beekeeper Studio is a cross-platform, open source SQL editor and database manager from Beekeeper Studio, Inc. It is available for Linux, Mac and Windows. A security vulnerability exists in Beekeeper Studio v3.2.0 that allows an attacker to execute arbitrary code via a specially crafted payload...
DWSurvey 代码注入漏洞
DWSurvey is a questionnaire system written in Java. DWSurvey v3.2.0 suffers from a code injection vulnerability that could allow an attacker to perform Remote Command Execution RCE via the component /sysuser/SysPropertyAction.java...
PT-2022-12436
Name of the Vulnerable Software and Affected Versions Nicotine+ versions 3.0.3 through 3.2.0 Description A denial of service DoS issue exists, allowing a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character. This c...