1136 matches found
CVE-2023-50740
In Apache Linkis =1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. We recommend users upgrade the version of Linkis to version 1.5.0...
CVE-2023-29216
In Apache Linkis =1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Versions of Apache Linkis = 1.3.0...
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 9.5.18 to 10.4.13 jscPED-11591,jscPED-11649: Security issues fixed: CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto bsc1234554 CVE-2023-3128: Fixed...
SUSE CVE-2023-1410
Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have contro...
CVE-2025-24432
creationtimestamp| type| source ---|---|--- 2025-02-11 18:20:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbjtao772h 2025-02-11 21:33:43+00:00| seen| https://t.me/cvedetector/17749...
The vulnerability of the Security component of the Oracle Communications Order and Service Management system allows a perpetrator to gain read, modify, add, or delete access to data, or cause a partial service disruption.
The vulnerability of the Security component of the Oracle Communications Order and Service Management system is related to a data source validation error. Exploiting this vulnerability may allow an attacker, operating remotely, to gain read, modify, add, or delete access to data, or cause a parti...
CVE-2022-43773
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled...
CVE-2022-43940
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service...
The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows attackers to disclose protected information.
The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information through a specially...
CVE-2024-20147
creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaond6oke2j 2025-02-03 07:46:56+00:00| seen| https://t.me/cvedetector/17053 2025-02-03 08:03:45+00:00| seen|...
CVE-2019-19245
creationtimestamp| type| source ---|---|--- 2025-02-02 11:26:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3789 2025-02-03 08:53:13+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lhb64vdklk2n 2025-02-06 02:39:09+00:00| seen|...
CVE-2017-13318
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-24747
creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadn5b372p 2025-01-27 17:40:28+00:00| seen| https://t.me/cvedetector/16472...
PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools
Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...
GHSA-VG7J-7CWX-8WGW
creationtimestamp| type| source ---|---|--- 2025-01-19 00:37:53+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lhedcgo2e...
CVE-2017-13322
creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...
CVE-2024-12593
creationtimestamp| type| source ---|---|--- 2025-01-15 12:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmy73zh2c 2025-01-15 12:21:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1735 2025-01-15 12:47:45+00:00| seen|...
CVE-2024-12919
creationtimestamp| type| source ---|---|--- 2025-01-14 10:47:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oam242e 2025-01-14 10:48:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oor2n2w 2025-01-14 10:48:18+00:00| seen|...
CVE-2024-56414
creationtimestamp| type| source ---|---|--- 2025-01-02 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwsk7y622 2025-01-02 16:52:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlt3as2r 2025-01-02 17:36:30+00:00| seen|...