22160 matches found
DoS (Denial of Service) com.thoughtworks.xstream:xstream Dependency in Jira Software Data Center and Server
This High severity com.thoughtworks.xstream:xstream Dependency vulnerability was introduced in versions 8.20.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, and 9.7.0 of Jira Software Data Center and Server. This com.thoughtworks.xstream:xstream Dependency vulnerability, with a CVSS Score of...
Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks
The Kimsuky aka Springtail advanced persistent threat APT group, which is linked to North Korea's Reconnaissance General Bureau RGB, has been observed deploying a Linux version of its GoBear backdoor as part of a campaign targeting South Korean organizations. The backdoor, codenamed Gomir, is...
CVE-2023-43751
Uncontrolled search path in IntelR Graphics Command Center Service bundled in some IntelR Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-43751
Uncontrolled search path in IntelR Graphics Command Center Service bundled in some IntelR Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-47165
Improper conditions check in the IntelR Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access...
CVE-2023-47165
Improper conditions check in the IntelR Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access...
CVE-2023-47165
CVE-2023-47165 affects Intel’s Data Center GPU Max Series 1100 and 1550. The issue is an improper conditions check in the GPU Max Series driver/firmware that may allow a privileged local attacker to cause a denial of service. The CVSS 3.1 base score is 6.0 (AV:L/AC:L/PR:H/UI:N/S:C/I:N/A:H). Explo...
Improper Authorization org.springframework.security:spring-security-core Dependency in Confluence Data Center and Server
This High severity org.springframework.security:spring-security-core Dependency vulnerability was introduced in versions 1.0 of Confluence Data Center and Server. This org.springframework.security:spring-security-core Dependency vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of...
SQLi (SQL Injection) org.postgresql:postgresql Dependency in Confluence Data Center and Server
This Critical severity org.postgresql:postgresql Dependency vulnerability was introduced in versions 6.0.1 of Confluence Data Center and Server. Confluence Data Center is unaffected by this vulnerability as it does not use the PreferQueryMode=SIMPLE parameter required for this vulnerability in it...
Intel Data Center GPU Max 安全漏洞
Intel Data Center GPU Max is a family of high-performance general-purpose graphics processors from Intel Corporation USA. A security vulnerability exists in Intel Data Center GPU Max that stems from the presence of an improper condition. It could allow a privileged user to conduct a denial of...
CVE-2024-28042
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center...
CVE-2024-28042 SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center...
CVE-2024-28042
CVE-2024-28042 relates to SUBNET PowerSYSTEM Center’s reliance on third‑party components. The vulnerability affects PowerSYSTEM Center prior to update 5.20.x.x, arising from untrusted third‑party libraries used by the product. Impact per CISA ICS advisory includes potential privilege escalation, ...
Infinite Loop vulnerability in Jira Service Management Data Center and Server
This vulnerability, with a CVSS Score of 7.5, contains an iteration or loop with an exit condition that cannot be reached. If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory. The software's operation may slow down...
RCE (Remote Code Execution) in Confluence Data Center and Server
This High severity RCE Remote Code Execution vulnerability was introduced in version of Confluence Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of , allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high...
SUBNET PowerSYSTEM Center 安全漏洞
SUBNET PowerSYSTEM Center is SUBNET's infrastructure for secure, centralized management of the many different intelligent electronic devices meters, relays, RTUs, etc. deployed throughout the transmission and distribution system. A security vulnerability exists in SUBNET PowerSYSTEM Center versio...
PT-2024-22232 · Unknown · Powersystem Center
Name of the Vulnerable Software and Affected Versions: PowerSYSTEM Center affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in PowerSYSTEM Center. No specific details about the nature of the vulnerabilities, affected devices, or...
Information Disclosure in Jira Core Data Center
This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosur...
The "Your Jira Issues" section on the Bitbucket dashboard is fetching images via the internal Application URL rather than the external Display URL
h3. Issue Summary This is reproducible on Data Center: yes h3. Steps to Reproduce Create an Application link to Jira Instance with different "Application" and 'Display URLs' !image-2024-05-14-18-13-31-601.png|thumbnail! Block the 'Application URL' access on the client system browser using...
