8092 matches found
CVE-2022-22319
IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366...
Design/Logic Flaw
IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366...
CVE-2022-22319
IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366...
CVE-2022-22319
IBM Robotic Process Automation 21.0.1 contains an authorization issue: a registered user can delete a queue, disrupting scripts dependent on that queue. The root cause is lack of privilege restrictions on queue deletion. A fix is available: upgrade to IBM Robotic Process Automation 21.0.1.2 or hi...
Phabricator: Global default settings page is accessible to non-administrators
If you go to /settings/, it correctly redirects to /settings/user/username/ and does not give you the option to change global default settings. However if you go straight to /settings/builtin/global/, any user can edit the global default settings. According to https://secure.phabricator.com/D1604...
CVE-2022-22319
IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366...
The vulnerability of the pfkey_register function in the Linux operating system’s kernel allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the pfkeyregister function in the Linux kernel’s net/key/afkey.c file is related to the exposure of sensitive information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
Improper Input Validation
Overview org.jenkins-ci.main:jenkins-core is an open source automation server. Affected versions of this package are vulnerable to Improper Input Validation. An attacker can disrupt service availability by sending a specially crafted payload to the system. Remediation Upgrade...
Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to gain unauthorized access to modify, add, or delete data, or to cause service failures.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data, or to cause a service failure using the MySQL network protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using the MySQL network protocol...
Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to gain unauthorized access to modify, add, or delete data, or to cause service failures.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data, or to cause a service failure using the MySQL network protocol...
Vulnerability of the Server component: The MySQL Server, a database management system component, allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures using the MySQL network protocol...
HUAWEI HarmonyOS 安全漏洞
HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS AI business component, which stems from the fact that hiaiserver does not do...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using the MySQL network protocol...
Vulnerability of the MySQL Server component: The DML mechanism of the MySQL database management system’s server allows a hacker to trigger a service failure.
The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
F5 BIG-IP 访问控制错误漏洞
F5 BIG-IP is an application delivery platform that integrates traffic management, DNS, inbound and outbound rules, web application firewall, web gateway, load balancing and other functions. F5 BIG-IP iControl REST authentication bypass vulnerability, the vulnerability is due to the authentication...
CVE-2022-1300
Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...
CVE-2022-1300
Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...
Authentication flaw
Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...
CVE-2022-1300 Missing authentication in TRUMPF products may result in corruption of data
Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...