Airflow Data Access

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an audio memory corruption when processing calibration data returned from the ACDB loader...

Nemesis - An Offensive Data Enrichment Pipeline

Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal with Nemesis was to create a centralized data processing platform that ingests data produced during offensive security assessments. Nemesis aims to automate a number of...

Delta Industrial Automation DOPSoft Buffer Overflow

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...

Kafka vs RabbitMQ

An Intro to Kafka and RabbitMQ: The Masters of Messaging In the realm of messaging systems, two names stand out: Kafka and RabbitMQ. These two powerhouses have become the go-to solutions for developers and organizations looking to handle high-volume, real-time data processing and messaging. But...

Airflow Lack of Access Control

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify the data...

Airflow Registration Information Disclosure

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that should be protected...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a set of human machine interface HMI software from Delta Electronics of Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the wLogTitlesActionLen field of a DPS file...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a Human Machine Interface HMI software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the wTitleTextLen field of a DPS file...

Archive Utility macOS Unauthenticated Access

The vulnerability of the Archive Utility component in macOS operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Memory corruption

Memory corruption in wearables while processing data from AON...

PT-2024-12400 · Wearables · Wearables

Name of the Vulnerable Software and Affected Versions: Wearables affected versions not specified Description: The issue is related to memory corruption in wearables when processing data from AON. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

Information Leakage Vulnerability in Some Huawei Products (huawei-sa-20200219-01-leak)

There is an information leakage vulnerability in some Huawei products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-6721

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system...

CVE-2023-6721

CVE-2023-6721 is an XML External Entity (XXE) vulnerability in Repox that affects the XML data processing in the fileupload function, enabling a remote attacker to cause interaction with the server’s filesystem. Public sources consistently describe this as an XXE issue with high impact. CNNVD not...

CVE-2023-6721 Improper Restriction of XML External Entity Reference in Repox

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system...

PT-2023-36081 · Repox · Repox

Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: A vulnerability has been found that allows a remote attacker to interfere with the application's XML data processing in the fileupload function. This results in interaction between the attack...

PT-2023-9243

Name of the Vulnerable Software and Affected Versions MasterSCADA 4D affected versions not specified Description The issue is related to errors in processing input data in the MasterSCADA 4D SCADA system. Exploitation of this issue could allow a remote attacker to cause a denial of service...

Apache NiFi cross-site scripting vulnerability (CNVD-2023-9665850)

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and...

Honeywell ProWatch RCE

The vulnerability of the Honeywell ProWatch software platform for remote monitoring and control is related to data processing errors. Exploiting this vulnerability could allow a intruder to execute arbitrary code...