7976 matches found
CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011
CVE-2024-53011 is a permissions/Access-Controls information-disclosure issue affecting the Video Analytics engine. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) yields a base score of 7.9 (High) with LOCAL attack vector and HIGH privileges required, implying local access is needed and...
CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
Malicious code in @events-ui-toolkit/event-analytics-fetcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e120c48fe02e1c6878623273ed3cedd8f066e1b4f6ad2d5c43a0f9c2c3ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-9300 · Qualcomm · Snapdragon +70
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur due to improper permission and access controls to the Video Analytics engine. Recommendations: At the moment, there is no information about a newer version...
The vulnerability of the cloud platform for business analytics and planning in IBM Planning Analytics allows a malicious actor to gain unauthorized access to the system by allowing unlimited upload of sensitive files.
The vulnerability of the cloud platform for business analytics and planning in IBM Planning Analytics is related to the unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the system by uploading a...
The vulnerability of the cloud platform for business analytics and planning in IBM Planning Analytics allows a malicious actor to gain unauthorized access to the system by allowing unlimited upload of sensitive files.
The vulnerability of the cloud platform for business analytics and planning in IBM Planning Analytics is related to the unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the system by uploading a...
CVE-2025-0895
IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...
CVE-2025-0895
IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...
CVE-2024-55907
IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...
CVE-2024-55907
IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...
CVE-2025-0823
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2024-56340
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker to access sensitive files by inserting path traversal payloads inside the deficon parameter...
Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, a debug protection vulnerability has been addressed. Please refer to the table in the...
Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, a vulnerability related to Source Code Obfuscation has been addressed. Please refer to...
IBM Cognos Analytics Mobile 安全漏洞
IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which stems from weak obfuscation and could...
IBM Cognos Analytics Mobile 安全漏洞
IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which originates from debug code log message...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the lack of security measures for the website structure, allowing attackers to carry out cross-site scripting (XSS) attacks.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
CVE-2025-0823
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2025-0823
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...