757 matches found
Cyber Power Systems PowerPanel Business Edition 安全漏洞
Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...
QEMU 安全漏洞
QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. A security vulnerability exists in QEMU versions 8.2.3 and 9.0.0, which stems from a flaw found in QEMU in the Virtio PCI binding...
PT-2024-23676 · Derbynet · Derbynet
Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows attackers to execute arbitrary code via the ./inc/kiosks.inc component. This is a Cross Site Scripting vulnerability. Recommendations: For DerbyNet versions 9.0 and below, consider...
PT-2024-24345 · Digital Bazaar · @Digitalbazaar/Zcap
Name of the Vulnerable Software and Affected Versions: @digitalbazaar/zcap versions prior to 9.0.1 Description: The issue arises when invoking a capability with a chain depth of 2, where the expires property is not properly checked against the current date or other date param. This can allow...
PT-2024-23672 · Derbynet · Derbynet
Name of the Vulnerable Software and Affected Versions: DerbyNet version 9.0 Description: The issue allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering. This is a SQL Injection vulnerability. Recommendations: For DerbyNet version 9.0, consider...
PT-2024-23677 · Derbynet · Derbynet
Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows attackers to execute arbitrary code via the racer-results.php component. This is a Cross Site Scripting vulnerability. Recommendations: For DerbyNet versions 9.0 and below, conside...
CVE-2024-29946
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into...
Exploit for Path Traversal in Zimbra Collaboration
CVE-2022-41352 PoC How does this detection method work?...
space-time enterprise information integration platform security vulnerability
The yonyou space-time enterprise information integration platform is an information integration platform from China's UFIDA yonyou company. A security vulnerability exists in Yonyou space-time enterprise information integration platform v.9.0 and earlier versions, which originated from a...
PT-2024-2359 · Apache · Apache Solr
Name of the Vulnerable Software and Affected Versions: Apache Solr versions 6.0.0 through 8.11.2 Apache Solr versions 9.0.0 through 9.3.0 Apache Solr versions 9.0.0 before 9.4.1 Description: The issue is related to the exposure of sensitive information to an unauthorized actor in Apache Solr. Sol...
Vulnerabilities fixed in Splunk
Splunk has fixed vulnerabilities in Splunk Enterprise. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Access to sensitive data Access to system data Splunk has...
PT-2024-15633 · Mlflow · Mlflow
Name of the Vulnerable Software and Affected Versions: mlflow/mlflow version 8.2.1 mlflow/mlflow versions prior to 2.9.0 Description: A vulnerability in mlflow/mlflow allows for remote code execution due to improper neutralization of special elements used in an OS command within the...
Apache Tomcat Security Vulnerability
Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. A security vulnerability exists in Apache Tomcat versions 8.5.7 through 8.5.63 and 9.0.0-M11 through 9.0.43. An attacker could explo...
WALLIX Bastion Security Vulnerability
WALLIX Bastion is a modular solution from WALLIX France. A security vulnerability exists in WALLIX Bastion versions prior to 9.0.10, 10.0.6, and 10.4.2, which stems from incorrect access control and can be exploited by an attacker to gain unauthorized access to the...
Man Group D-Tale Code Issue Vulnerability
Man Group D-Tale is a pandas data structure visualization tool from Man Group. A code issue vulnerability exists in Man Group D-Tale versions prior to 3.9.0. An attacker could exploit the vulnerability to gain access to files on the server...
UBUNTU-CVE-2024-21908
TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser...
Chinese Perpetual Calendar Security Vulnerability
Chinese Perpetual Calendar 微鲤万年历 is a mobile calendar application. A security vulnerability exists in Chinese Perpetual Calendar version v9.0.0, which originates from an arbitrary file read vulnerability in the openFile method...
PT-2023-30871 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 8.5.13 and earlier Concrete CMS versions 9.0.0 through 9.2.2 Description: The issue allows an admin to add a stored XSS payload via the Layout Preset name, potentially affecting user interactions with the system...