2855 matches found
PT-2025-52751
Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.5-00 Description A Cross-site Scripting issue exists in Hitachi Infrastructure Analytics Advisor Data Center...
PT-2025-52752
Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.5-00 Description An authorization bypass issue exists in Hitachi Infrastructure Analytics Advisor Data Center...
CVE-2025-9122
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-350-01 Güralp Systems FMUS Fortimus Series and MIN Minimus Series ICSA-25-350-02 Johnson Controls PowerG,...
Hitachi Energy AFS, AFR and AFF Series
RISK EVALUATION Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...
EUVD-2025-203472
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet...
CVE-2025-9121 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods...
CVE-2025-9121
Pentaho Data Integration and Analytics Community Dashboard Editor plugin (versions before 10.2.0.4, including 9.3.0.x and 8.3.x) is affected by CVE-2025-9121 due to deserializing untrusted JSON data without constraining the parser to approved classes/methods. Root cause: insecure JSON deserializa...
CVE-2025-9122 Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet...
Hitachi Vantara Pentaho Data Integration and Analytics 安全漏洞
Hitachi Vantara Pentaho Data Integration and Analytics is a Business Intelligence Dashboard Designer from Hitachi Vantara, USA. A security vulnerability exists in Hitachi Vantara Pentaho Data Integration and Analytics versions prior to 10.2.0.4, which stems from displaying the full server stack...
PT-2025-51318
Name of the Vulnerable Software and Affected Versions Pentaho Data Integration and Analytics Community Dashboard Framework versions prior to 10.2.0.4 Pentaho Data Integration and Analytics Community Dashboard Framework versions 8.3.x Pentaho Data Integration and Analytics Community Dashboard...
Hitachi Energy Asset Suite
SUMMARY Hitachi Energy is aware of a Jasper Report vulnerability that affects the Asset Suite product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution RCE attack on the product. Please refer to the Recommended Immediate Actions for...
Hitachi ABB AFS Double Free (CVE-2022-4450)
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This plugin only works wi...
Hitachi ABB AFS Use After Free (CVE-2023-0215)
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This plugin only works wi...
Malicious code in hitachi-poke63 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-141626
Malicious code in hitachi-poke21 npm...
Malicious code in hitachi-poke11 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47078113ec41443b7a259e156eab7e2b575d8c5cbb4c6a5114a109b77945b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-141598
Malicious code in hitachi-poke46 npm...
EUVD-2025-141582
Malicious code in hitachi-poke6 npm...
Malicious code in hitachi-poke68 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f8495eb9817d305c8d872bd45fa89f6a337003b2d24f0b6ae95b1e8f6b36ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...