Lucene search
K

1041 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.1 views

The vulnerability of the DataSource Manager module of the Apache Linkis application connection, management, and orchestration software allows a attacker to execute arbitrary code.

The vulnerability of the DataSourceManager module in the Apache Linkis application connection, management, and orchestration software is related to the lack of effective parameter filtering. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting JNDI...

9CVSS6AI score0.00845EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/07/18 12:0 a.m.6 views

H2O Flow Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible H2O Flow instance on the target application. H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. This...

7.2AI score
Exploits0References2
CNVD
CNVD
added 2024/07/17 12:0 a.m.6 views

Apache Linkis Code Issue Vulnerability

Apache Linkis is a middleware product of the U.S. Apache Apache Foundation, which can establish an effective connection between upper-tier applications and the underlying data engine. Apache Linkis 1.6.0 before the version of the code problem vulnerability, the vulnerability stems from the data...

8.8CVSS7.7AI score0.01228EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/07/15 9:36 a.m.26 views

Apache Linkis DataSource remote code execution vulnerability

In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...

8.8CVSS7.8AI score0.01228EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/07/15 8:15 a.m.29 views

CVE-2023-46801

In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...

8.8CVSS0.01228EPSS
Exploits0References2
OSV
OSV
added 2024/07/15 8:15 a.m.16 views

CVE-2023-46801

In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...

8.8CVSS7.7AI score
Exploits0References2
CVE
CVE
added 2024/07/15 7:55 a.m.76 views

CVE-2023-46801

Apache Linkis vulnerable to remote code execution in the DataSource MySQL handler for versions = 1.8.0_241 and/or upgrade Linkis to version 1.6.0. If upgrading is not immediately possible, validate and restrict JRMP usage and account privileges to reduce exposure. If exploitation details are not ...

8.8CVSS8.9AI score0.01228EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/15 7:55 a.m.21 views

CVE-2023-46801 Apache Linkis DataSource: DataSource Remote code execution vulnerability

In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...

7.8AI score0.01228EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/15 12:0 a.m.3 views

Apache Linkis 代码问题漏洞

Apache Linkis is a middleware product of the U.S. Apache Apache Foundation, which can establish an effective connection between upper-tier applications and the underlying data engine. Apache Linkis 1.6.0 before the version of the code problem vulnerability, the vulnerability stems from the data...

8.8CVSS8.2AI score0.01228EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/07/15 12:0 a.m.1 views

Apache Linkis 代码问题漏洞

Apache Linkis is a middleware product of the U.S. Apache Apache Foundation, which can establish an effective connection between upper-tier applications and the underlying data engine. Apache Linkis 1.6.0 before the version of the code problem vulnerability , the vulnerability stems from the lack ...

8.8CVSS7.4AI score0.00845EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/07/15 12:0 a.m.3 views

Apache Linkis Security Vulnerability

Apache Linkis is a middleware product from the Apache Foundation that establishes an effective connection between upper-tier applications and the underlying data engine. A security vulnerability exists in Apache Linkis versions prior to 1.6.0, which stems from a lack of effective parameter...

6.5CVSS6.9AI score0.00728EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/07/13 12:0 a.m.4 views

PT-2024-5100 · Apache · Apache Linkis

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions = 1.8.0 241. For Apache Linkis versions = 1.5.0, upgrade Linkis to version 1.6.0...

9CVSS8AI score0.01228EPSS
Exploits0References11
Circl
Circl
added 2024/07/10 7:33 a.m.1 views

CVE-2024-6411

creationtimestamp| type| source ---|---|--- 2024-07-10 07:33:44+00:00| seen| https://t.me/cvedetector/507 2025-02-14 09:47:00+00:00| seen| Telegram/3nm-cCgCoeyH8a1WpJsfQVll0GJIaQ8Tul9DcmLIt0qLGT...

8.8CVSS5.1AI score0.00768EPSS
Exploits0References1
OSV
OSV
added 2024/06/28 7:15 p.m.2 views

CVE-2024-25053

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...

5.9CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2024/06/28 7:15 p.m.17 views

CVE-2024-25053

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...

5.9CVSS0.00283EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/06/28 6:53 p.m.19 views

CVE-2024-25053 IBM Cognos Analytics improper certificate validation

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...

5.9CVSS0.00283EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/28 6:53 p.m.18 views

CVE-2024-25053 IBM Cognos Analytics improper certificate validation

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...

5.9CVSS6.4AI score0.00283EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/28 12:0 a.m.2 views

PT-2024-20721 · Ibm · Ibm Cognos Analytics +1

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.2.0 through 11.2.4 IBM Cognos Analytics versions 12.0.0 through 12.0.2 Description: The issue is related to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This...

5.9CVSS7.5AI score0.00283EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/06/26 12:0 a.m.6 views

Ollama Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Ollama instance on the target application. Ollama is an open-source application to quickly set up various LLMs. This detection is included in the AI and LLM category. No source data...

7.2AI score
Exploits0References2
OSV
OSV
added 2024/06/17 1:15 p.m.1 views

CVE-2024-6055

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration fil...

4.7CVSS5.8AI score0.00497EPSS
Exploits0References1
Rows per page
Query Builder