CVE-2023-24724

A stored XSS vulnerability was identified in the SAS Admin Console (SAS Web Administration interface, SASAdmin). The issue resides in the user management module, arising from insufficient validation and sanitization of data entered in the user creation and editing forms. Affected product releases...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

PT-2023-21426 · Apple · Macos Ventura +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 tvOS versions prior to 16.4 watchOS versions pri...

PT-2023-8411 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 tvOS versions prior to 16.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue is related to an out-of-bounds read in the ImageIO component, which can...

About the security content of watchOS 9.4

About the security content of watchOS 9.4 This document describes the security content of watchOS 9.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2023-21615 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 iOS versions prior to 15.7.6 iPadOS versions prior to 15.7.6 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.7 tvOS versions...

PT-2023-19026 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 15.7.4 and prior to 16.4 iPadOS versions prior to 15.7.4 and prior to 16.4 watchOS versions prior to 9.4 Description: The issue allows a sandboxed app to determine which app is...

PT-2023-19018 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.6 tvOS versions...

PT-2023-21456 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 tvOS versions prior to 16.4 watchOS versions...

Security Bulletin: IBM Workload Scheduler is vulnerable to XML External Entity Injection (XXE) attack

Summary IBM Workload Scheduler is vulnerable to XML External Entity Injection XXE exploitation in "Create Job on Broker" page. Vulnerability Details CVEID:CVE-2022-22486 DESCRIPTION: IBM Tivoli Workload Scheduler is vulnerable to an XML External Entity Injection XXE attack when processing XML dat...

Debian: Security Advisory (DLA-1784)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-1510 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNAC versions 9.4.0 through 9.4.1 Fortinet FortiNAC versions prior to 9.2.6 Description: The issue is related to improper authorization, allowing an unauthenticated user to perform administrative operations via crafted HTTP POST...

CVE-2022-38389

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975...

CVE-2022-38389

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975...

CVE-2022-22486

IBM Tivoli Workload Scheduler (versions 9.4, 9.5, 10.1) is vulnerable to an XML External Entity (XXE) injection when processing XML data. Root cause: XXE in XML processing. Impact per sources: potential exposure of sensitive information and resource consumption. Remediation in connected documents...

Drupal 9.4.x < 9.4.10 Information Disclosure

According to its self-reported version, the instance of Drupal running on the remote web server is 9.4.x prior to 9.4.10, 9.5.x prior to 9.5.2, or 10.0.x prior to 10.0.2. It is, therefore, affected by an information disclosure vulnerability in the Media Library module. Note that the scanner has n...

PT-2022-6375 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a command injection vulnerability. An authenticated user with access to the local shell and the privilege to gather logs from the cluster could potentiall...

CVE-2022-2752 Potential vulnerabilities in GM login process

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

Secomea GateManager 授权问题漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions 9.4 through 9.7. An attacker has exploited the vulnerability to impersonate a previous user in certain login failures...