Design/Logic Flaw

The Birthday attack against 64-bit block ciphers flaw CVE-2016-2183 was reported for the health checks port 9979 on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...

CVE-2023-0296

The Birthday attack against 64-bit block ciphers CVE-2016-2183 was reported for the health checks port 9979 on the etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...

PT-2023-35502 · Tor · Tor

Name of the Vulnerable Software and Affected Versions: tor versions 0.4.7.12 through 0.4.7.13 Description: The issue concerns a fix for the SafeSocks option to avoid DNS leaks. Additionally, there are improvements to congestion control and fixes for relay channel handling. New metrics are also...

CVE-2015-10023

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

CVE-2015-10023: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

PT-2023-10202 · Unknown · Fumon Trello-Octometric

Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...

CVE-2022-4860

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

Sql injection

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

CVE-2022-4860 KBase Metrics methods_upload_user_stats.py upload_user_data sql injection

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

CVE-2022-4860 KBase Metrics methods_upload_user_stats.py upload_user_data sql injection

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

CVE-2022-4860

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

CVE-2022-4860

CVE-2022-4860 affects KBase Metrics. Concrete details across connected records show a SQL injection in the function upload_user_data (file src/daily_cron_jobs/methods_upload_user_stats.py). The issue arises from how user data is uploaded, enabling injection under certain inputs. The patch 959dfb6...

PT-2022-28146 · Unknown · Kbase Metrics

Name of the Vulnerable Software and Affected Versions: KBase Metrics affected versions not specified Description: A critical issue was found in KBase Metrics, affecting the upload user data function of the file source/daily cron jobs/methods upload user stats.py. This issue leads to sql injection...

KBase Metrics SQL注入漏洞

KBase Metrics are scripts and other tools used to collect metrics and generate reports and summaries. KBase Metrics suffers from a SQL injection vulnerability that stems from a problem with the function uploaduserdata in the file source/dailycronjobs/methodsuploaduserstats.py, which can lead to s...

CVE-2022-4860: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...

CVE-2022-37310

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...

CVE-2022-37310

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...

CVE-2022-37310: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...

CVE-2022-37310

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...

CVE-2022-37310

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...