PT-2024-37746 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions 1.10.0 through 1.10.1 Description: A denial-of-service attack is possible through the execution functionality of KNIME Business Hub. It allows an authenticated attacker with job execution privileges to execute a jo...

Red Hat Satellite 安全漏洞

Red Hat Satellite is a suite of system management platforms from Red Hat, an American company. The platform can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in Red Hat Satelli...

RaspberryMatic unauthenticated Remote Code Execution vulnerability through HMServer File Upload.

RaspberryMatic / OCCU contains a unauthenticated remote code execution RCE vulnerability, caused by multiple issues within the Java based HMIPServer.jar component. The webui allows for Firmware uploads which can be reached through the URL /pages/jpages/system/DeviceFirmware/addFirmware. This allo...

BIT-GITLAB-2023-4700 Missing Authorization in GitLab

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals...

Apache Hadoop allows local user to gain root privileges

Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote authenticated users, this MAY permit remote users to gain root privileges. Hadoop 3.3.0 updated the "...

SolarWinds Platform 2023.3.x < 2023.4 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.4. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20234 advisory. - SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If...

CVE-2023-40061

Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result...

CVE-2023-40061

Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result...

Design/Logic Flaw

Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result...

CVE-2023-40061 Insecure Job Execution Mechanism Vulnerability

Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result...

CVE-2023-40061 Insecure Job Execution Mechanism Vulnerability

Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result...

CVE-2023-40061

CVE-2023-40061 affects SolarWinds Platform (SolarWinds Platform 2023.3.x

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of an insecure job execution mechanism vulnerability that could lead to...

PT-2023-27244 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform version 2023.4 Description: The issue is related to an insecure job execution mechanism, which can lead to other attacks. This vulnerability may result in Denial of Service DoS or Cross-Site Scripting XSS attacks...

CVE-2023-5009 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of CVE-2023-3932...

CVE-2021-45790

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands...

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. Mediawiki suffers from a Permission Permission and Access Control Issue vulnerability that stems from the...

MCollective: Remote Code Execution

Background MCollective is a framework to build server orchestration or parallel job execution systems. Description A vulnerability was discovered in MCollective which allowed for deserialized YAML from agents without calling safeload. This allows the potential for arbitrary code execution on the...

[SECURITY] Fedora 24 Update: parallel-20160222-1.fc24

GNU Parallel is a shell tool for executing jobs in parallel using one or mo re machines. A job is typically a single command or a small script that has to be run for each of the lines in the input. The typical input is a list of file s, a list of hosts, a list of users, or a list of tables. If yo...

IBM InfoSphere Information Server Information Disclosure Vulnerability

IBM InfoSphere Information Server is an American IBM company a set of software that can help enterprises to get information from the complex information dispersed in their systems. An information disclosure vulnerability exists in IBM InfoSphere Information Server 11.3 and 11.5. It allows an...