21862 matches found
CVE-2023-6276
A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker sending invalid emails. (CVE-2023-27043).
Summary There is a vulnerability in Python used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. An attacker could exploit this vulnerability to send messages from e-mail addresses that would otherwise be rejected. CVE-2020-23064. This bulletin identifies the security fixes ...
Security Bulletin: A vulnerability in SciPy may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service. (CVE-2023-25399).
Summary There is a vulnerability in SciPy used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP, which may result in a denial of serviceCVE-20230-25399. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:...
FortiADC Automation Privilege Escalation
The vulnerability of the FortiADC application delivery controller’s automation function is related to access control errors. Exploiting this vulnerability allows a malicious actor to elevate their privileges to super-administrator level through a specially crafted automation CLI script...
Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation and result in a remote attacker bypassing security restrictions (CVE-2023-24329).
Summary There is a vulnerability in Python used by IBM Robotic Process Automation as part of Watson NLP and base container images which may result in a remote attacker to bypass security restriction CVE-2023-24329. Vulnerability Details CVEID: CVE-2023-24329 DESCRIPTION: Python could allow a remo...
Cross site scripting
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected by a cross-site scripting vulnerability. Due to incorrect usage of Django's marksafe API when rendering certain type...
CVE-2023-48705
Nautobot CVE-2023-48705 affects all Nautobot versions before 1.6.6 and before 2.0.5. Root cause: incorrect usage of Django’s mark_safe() when rendering certain user-authored content (e.g., custom links, job buttons, computed fields). Impact: attackers with permission to create or edit such conten...
CVE-2023-5983
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data.This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983
CVE-2023-5983 affects Botanik Software Pharmacy Automation. Several sources confirm an information-disclosure vulnerability in versions prior to 2.1.133.0, allowing retrieval of embedded sensitive data and private personal information by an unauthorized actor. CVSSv3.1 base score 7.5 (HIGH) with ...
CVE-2023-5983 Information Disclosure in Botanik Software Pharmacy Automation
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983 Information Disclosure in Botanik Software Pharmacy Automation
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
Botanik Software Pharmacy Automation Information Disclosure Vulnerability
Botanik Software Pharmacy Automation is an application. An information disclosure vulnerability exists in Botanik Software Pharmacy Automation versions prior to 2.1.133.0, which stems from the presence of a sensitive information disclosure vulnerability...
PT-2023-32460
Name of the Vulnerable Software and Affected Versions Botanik Software Pharmacy Automation versions prior to 2.1.133.0 Description The issue allows exposure of private personal information to an unauthorized actor, enabling the retrieval of embedded sensitive data. Recommendations For versions...
Tongda OA Automation Tool SQL Injection
The vulnerability of the delete.php script General/system/censorwords/module/delete.php, a tool for automating business processes in Tongda OA, is related to the failure to protect the SQL query structure during the processing of the DELETESTR parameter. Exploiting this vulnerability allows an...
Fuji Electric TELLUS Out-of-Bounds Read Vulnerability
Fuji Electric TELLUS is an industrial automation software with advanced features, user-friendliness and support for remote control. An out-of-bounds read vulnerability exists in Fuji Electric TELLUS, which can be exploited by an attacker to execute arbitrary code by opening a specially crafted fi...
Improving compliance management with mappings and automation
Based on the research in Coalfires 2023 Securealities Compliance Report, the third blog in this series examines one of the top concerns of CISOs and compliance program managers: realizing the value of a platform to simplify compliance...
