Lucene search
+L

430 matches found

CNVD
CNVD
•added 2023/02/07 12:00 a.m.•64 views

IBM Cloud Pak for Security Information Disclosure Vulnerability (CNVD-2023-07678)

IBM Cloud Pak for Security is an application from International Business Machines IBM, Inc. an open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated actions faster.IBM Cloud Pak for Security CP4S versions 1.10.0.0 through...

6.5CVSS0.3AI score0.00692EPSS
SaveExploits0References1
Fedora
Fedora
•added 2023/02/02 2:19 a.m.•35 views

[SECURITY] Fedora 37 Update: mingw-opusfile-0.12-9.fc37

libopusfile provides a high-level API for decoding and seeking within .opus files. It includes: Support for all files with at least one Opus stream including multichannel files or Ogg files where Opus is muxed with something else. Full support, including seeking, for chained files. A simple stere...

7.8CVSS7.6AI score0.00391EPSS
SaveExploits1
CVE
CVE
•added 2022/12/15 3:44 a.m.•102 views

CVE-2022-41561

The CVE-2022-41561 issue affects the JNDI Data Sources component of TIBCO JasperReports Server and related editions, allowing a privileged attacker with network access to achieve Remote Code Execution and obtain a reverse shell on the affected system. Affected products/versions include JasperRepo...

9.1CVSS7.4AI score0.01504EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•6 views

CVE-2022-41561: Undefined Security Weakness

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS6.1AI score0.01504EPSS
SaveExploits0References1
Circl
Circl
•added 2022/12/13 7:34 p.m.•13 views

CVE-2022-42856

creationtimestamp| type| source ---|---|--- 2022-12-13 19:34:15+00:00| exploited| https://t.me/alexmakus/4871 2022-12-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=933 2022-12-14 08:28:58+00:00| seen| https://t.me/itsecnews/1920 2022-12-14 15:50:08+00:00| exploited|...

8.8CVSS8.1AI score0.08523EPSS
SaveExploits0References25
NVD
NVD
•added 2022/12/13 7:15 p.m.•29 views

CVE-2022-41561

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS0.01504EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/13 7:15 p.m.•20 views

CVE-2022-41561

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

7.2CVSS6AI score0.01504EPSS
SaveExploits0References2
osv-ubuntu
osv-ubuntu
•added 2022/12/13 7:15 p.m.•19 views

UBUNTU-CVE-2022-41561

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS6AI score0.01504EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/13 7:15 p.m.•44 views

Design/Logic Flaw

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

5.8CVSS7.2AI score0.01504EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/12/13 7:15 p.m.•36 views

CVE-2022-41561

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS7.2AI score0.01504EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/12/13 5:00 p.m.•10 views

CVE-2022-41561

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS7.3AI score0.01504EPSS
SaveExploits0References3Affected Software3
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•28 views

PT-2022-25940 · Tibco Software · Tibco Jasperreports Server For Microsoft Azure +4

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server versions 8.0.2 and below TIBCO JasperReports Server version 8.1.0 TIBCO JasperReports Server - Community Edition versions 8.1.0 and below TIBCO JasperReports Server - Developer Edition versions 8.1.0 and below TIBCO...

9.1CVSS7.7AI score0.01504EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•23 views

TIBCO Software Jaspersoft JasperReports Server 安全漏洞

TIBCO Software Jaspersoft JasperReports Server is a report generation tool from TIBCO Software, USA. The product supports PDF, HTML, XLS, CSV and XML file output formats. A security vulnerability exists in TIBCO Software Jaspersoft JasperReports Server, which stems from its JNDI Data Sources...

9.1CVSS7.9AI score0.01504EPSS
SaveExploits0References3
NVD
NVD
•added 2022/12/12 6:15 p.m.•36 views

CVE-2022-4311

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation ...

6.5CVSS0.00353EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/12 6:15 p.m.•29 views

Design/Logic Flaw

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation ...

4CVSS6.2AI score0.00353EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/12/12 5:08 p.m.•94 views

CVE-2022-4311

Summary (CVE-2022-4311) : PcVue (ARC Informatique) versions 15–15.2.2 are affected by a vulnerability where sensitive information can be inserted into log files, allowing someone with log access to discover DbConnect data source connection strings and potentially credentials, leading to unauthori...

6.5CVSS6.2AI score0.00353EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/12/12 5:08 p.m.•55 views

CVE-2022-4311

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation ...

4.7CVSS6.4AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/12 5:08 p.m.•8 views

CVE-2022-4311

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation ...

4.7CVSS6.3AI score0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/12/12 12:00 a.m.•24 views

ARC Informatique PcVue 日志信息泄露漏洞

ARC Informatique PcVue is a multifunctional HMI-SCADA software from ARC Informatique, France, an all-in-one solution that monitors all aspects of a customer's assets.PcVue is used in a wide range of applications such as industrial control, building management, energy management, smart grids, ener...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•18 views

PT-2022-7096

Name of the Vulnerable Software and Affected Versions PcVue versions 15 through 15.2.2 Description An issue exists where sensitive information is inserted into log files, potentially allowing users with access to these logs to discover connection strings of data sources configured for the...

6.8CVSS6.6AI score0.00353EPSS
SaveExploits0References8
Rows per page
Query Builder