5011 matches found
JetBrains Hub 代码问题漏洞
JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A code issue vulnerability exists in versions of JetBrains Hub prior to 2023.1.15725, which stems from a lack of server request forgery protecti...
Devolutions Workspace 安全漏洞
Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace Desktop version 2023.1.1.3 and prior versions. An attacker could exploit the vulnerability to unlock Hub Workspace without being prompted to enter a password...
PT-2023-15810 · Jetbrains · Jetbrains Hub
Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2023.1.15725 Description: The issue concerns a missing Server-Side Request Forgery SSRF protection in the Auth Module integration. This could potentially allow for unauthorized access or actions. No information...
PT-2023-18560 · Devolutions · Devolutions Workspace Desktop
Name of the Vulnerable Software and Affected Versions: Devolutions Workspace Desktop versions 2023.1.1.3 and earlier Description: The issue allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force...
A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation
Summary: A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation. Detailed analysis: The clusternet has a deployment called cluster-hub inside the clusternet-system Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service...
GHSA-833C-XH79-P429 A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation
Summary: A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation. Detailed analysis: The clusternet has a deployment called cluster-hub inside the clusternet-system Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service...
PT-2023-22819 · Unknown · Clusternet
Name of the Vulnerable Software and Affected Versions: Clusternet versions prior to 0.15.2 Description: Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in Clusternet can be leveraged to lead to a cluster-level privilege escalation...
CVE-2023-21905
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: Routing Hub. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
Buffer overflow
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: Routing Hub. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2023-21905
The CVE-2023-21905 entry affects Oracle Banking Virtual Account Management (Routing Hub) in Oracle Financial Services Applications, specifically versions 14.5–14.7. A root cause of the vulnerability is insufficient input validation in the Routing Hub subcomponent, which enables a high-privilege a...
PT-2023-2632 · Oracle · Oracle Banking Virtual Account Management
Name of the Vulnerable Software and Affected Versions: Oracle Banking Virtual Account Management versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Routing Hub subcomponent of Oracle Banking Virtual Account Management, part of Oracle Financial...
Oracle Financial Services Applications 安全漏洞
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the Routing Hub component of Oracle Financial Services Applications versions 14.5, 14.6, a...
hub-business.de Cross Site Scripting vulnerability OBB-3252426
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure
Software Libsyn Publisher Hub Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.4.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-25057 Patch priority Low CVSS severity Low 5.3 Developer Libsyn PSID a56bf7f3b3e9 Credits yuyudhn Required privilege...
SUSE: Security Advisory (SUSE-SU-2023:1693-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wago PFC200 Cloud Connectivity Improper Host Validation (CVE-2019-5160)
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized...
SUSE: Security Advisory (SUSE-SU-2023:0705-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:0724-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
