Lucene search
+L

26 matches found

osv_mal
osv_mal
•added 2022/06/20 7:27 a.m.•13 views

MAL-2022-3857 Malicious code in integration-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eab96423a267bad86afc0855732ba4c4d79dd8a3532d34337c43268c57dcadd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/03/18 12:00 a.m.•86 views

Apache Gobblin Trust Management Issue Vulnerability

Apache Gobblin is a distributed data integration framework from the Apache Foundation USA. Used to simplify common aspects of big data integration, Apache Gobblin is vulnerable to a trust management issue that stems from Apache Gobblin trusting all certificates used for LDAP connections in...

9.8CVSS2.4AI score0.01302EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/02/03 12:00 a.m.•19 views

Apache Gobblin trust management issue vulnerability

Apache Gobblin is a distributed data integration framework from the Apache Foundation USA. Used to simplify common aspects of big data integration, Apache Gobblin is vulnerable to a trust management issue that stems from Apache Gobblin trusting all certificates used for LDAP connections in...

9.8CVSS5.5AI score0.01302EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/05/11 12:00 a.m.•19 views

SAP Process Integration Resource Management Vulnerability

SAP Process Integration is a middleware provided by SAP Germany that enables SAP to seamlessly integrate with non-SAP applications in the company or with systems external to the company. A privilege permission and access control issue vulnerability exists in SAP Process Integration versions 7.10,...

4.9CVSS5.6AI score0.00848EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/07/19 12:00 a.m.•4 views

PT-2020-4340

Name of the Vulnerable Software and Affected Versions: Spring Integration framework affected versions not specified Description: The issue is related to the Kryo Codec implementations in the Spring Integration framework, which can lead to a deserialization exploit when configured with default...

10CVSS0.04409EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•10 views

CVE-2002-0505: Undefined Security Weakness

Memory leak in the Call Telephony Integration CTI Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.13 allows remote attackers to cause a denial of service crash and reload via a series of authentication failures, e.g. via incorrect passwords...

5CVSS5.6AI score0.01771EPSS
SaveExploits0References1
Rows per page
Query Builder