PT-2024-25953 · Unknown · Zi Pt Solusi Usaha Mudah Analytic Data Query Module

Name of the Vulnerable Software and Affected Versions: ZI PT Solusi Usaha Mudah Analytic Data Query module aka izi data versions 11.0 through 17.x before 17.0.3 Description: A SQL injection vulnerability in the Analytic Data Query module allows a remote attacker to gain privileges via a query to...

CVE-2024-34533

A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module aka izidata 11.0 through 17.x before 17.0.3 allows a remote attacker to gain privileges via a query to IZITools::querycheck, IZITools::queryfetch, or IZITools::queryexecute...

CVE-2024-34533: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module aka izidata 11.0 through 17.x before 17.0.3 allows a remote attacker to gain privileges via a query to IZITools::querycheck, IZITools::queryfetch, or IZITools::queryexecute...

CVE-2024-26263: Missing Authentication for Critical Function

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

Improper Authorization

pimcore/customer-data-framework is vulnerable to Improper Authorization. The vulnerability is due to insufficient permission enforcement for with the /admin/customermanagementframework/gdpr-data/search-data-objects endpoint. An authenticated user without permission to access this endpoint can que...

Siemens Industrial Products Excessive Data Query Operations in a Large Data Table (CVE-2019-8460)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive...

[SECURITY] Fedora 39 Update: salt-3006.4-1.fc39

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

[SECURITY] Fedora 37 Update: salt-3005.4-1.fc37

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

Fedora 38 : cacti / cacti-spine (2023-6335ea9c0c)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-6335ea9c0c advisory. Update cacti and cacti-spine to version 1.2.25. This includes the upstream fixes for many CVEs...

Code injection

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

CVE-2023-5192 Excessive Data Query Operations in a Large Data Table in pimcore/demo

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

CVE-2023-5192

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

CVE-2023-5192

Affected software: pimcore/demo (prior to 10.3.0). Vulnerability: excessive data query operations in a large data table, with an additional risk from GraphQL introspection exposure on the demo site (demo.pimcore.fun). Root cause: not explicitly detailed beyond the symptom (excessive queries) and ...

CVE-2023-5192 Excessive Data Query Operations in a Large Data Table in pimcore/demo

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

CVE-2023-5192 Excessive Data Query Operations in a Large Data Table in pimcore/demo

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

CVE-2023-5192: Excessive Data Query Operations in a Large Data Table

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0...

SUSE CVE-2023-39513

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

Cross site scripting

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

CVE-2023-39513

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

CVE-2023-39513

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...