CVE-2019-19293

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The web interface of the Control Center Server CCS contains a reflected Cross-site Scripting XSS vulnerability that could allow an unauthenticated remote attacker to steal sensitive data or execute administrativ...

CVE-2019-19290

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The DOWNLOADS section in the web interface of the Control Center Server CCS contains a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from t...

CVE-2024-32499

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed...

PT-2025-18095 · Newforma · Newforma Project Center Server

Name of the Vulnerable Software and Affected Versions: Newforma Project Center Server versions through 2023.3.0.32259 Description: The issue allows remote code execution because .NET Remoting is exposed. Recommendations: For Newforma Project Center Server versions through 2023.3.0.32259, consider...

CVE-2019-19292

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The Control Center Server CCS contains an SQL injection vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker could exploit...

CVE-2024-21687

This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server. This File Inclusion vulnerability, with a CVSS Score of 8.1, allows an authenticated attacker to get the application to display the...

DoS (Denial of Service) org.xerial.snappy:snappy-java Dependency in Jira Software Data Center and Server

This High severity org.xerial.snappy:snappy-java Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, and 9.12.0 of Jira Software Data Center and Server. This org.xerial.snappy:snappy-java...

ARCHIBUS Security Vulnerabilities

ARCHIBUS is a software platform from ARCHIBUS focused on helping organizations effectively manage their real estate, facilities and infrastructure to improve efficiency, reduce costs and support strategic planning. A security vulnerability exists in ARCHIBUS version 4.0.3 that stems from the use ...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

RedTeamTool-CVE-2023-22515 – Vulnerability Exploitation Tool...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

PT-2023-12128 · Ericsson · Ericsson Mobile Switching Center Server

Name of the Vulnerable Software and Affected Versions: Ericsson Mobile Switching Center Server MSC-S versions BC 18A and IS 3.1 through IS 3.1 CP21 Description: The issue allows relative path traversal via a specific parameter in the https request after authentication, which enables access to fil...

CVE-2023-22505

This High severity RCE Remote Code Execution vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Center & Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8, allows an authenticated attacker to execute arbitrary code which has high...

VMware ESXi 缓冲区错误漏洞

VMware ESXi is a server virtualization platform from VMware that can be installed directly on physical servers. A security vulnerability exists in VMware ESXi| vCenter Server that originates from a contained heap overflow, which could be exploited by an attacker to achieve partial information...

PT-2022-5908 · Vmware · Vmware Vcenter Server +1

Name of the Vulnerable Software and Affected Versions: VMware vCenter Server affected versions not specified Description: The issue is related to a denial-of-service condition in the content library service of VMware vCenter Server. It can be triggered by a malicious actor with network access to...

The vulnerability of the Analytics service in the virtual infrastructure management tool VMware vCenter Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Analytics service in the virtual infrastructure management tool VMware vCenter Server is related to deficiencies in the segmentation of the controlled system area. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

VMware vCenter Server权限许可和访问控制问题漏洞

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A vulnerability exists in VMware...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Application Center

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Application Center. IBM Spectrum LSF Application Center has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Unspecified vulnerability in Gallagher Command Center Server (CNVD-2021-43496)

Gallagher Command Center Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from the exposure of sensitive information in Gallagher Command Centre Server to...

Unspecified Vulnerability in Gallagher Command Center Server

Gallagher Command Center Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Center Server that stems from Gallagher Command Center Server allowing cloud end-to-end encryption keys to b...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Application Center

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 7 used by IBM Spectrum LSF Application Center. IBM Spectrum LSF Application Center has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...