Lucene search
+L

12201 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.13 views

Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.10 views

PT-2024-39821 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...

3.3CVSS6.9AI score0.0025EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.9 views

PT-2024-39824 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...

3.3CVSS6.9AI score0.0025EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.7 views

PT-2024-39818 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...

3.3CVSS6.7AI score0.0025EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.12 views

PT-2024-39804 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...

7.8CVSS7.4AI score0.00271EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.12 views

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00275EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.14 views

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00312EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:00 a.m.110 views

Security Update for Microsoft Power BI Report Server (October 2024)

The Microsoft Power BI Report Server on the remote host is missing the October 2024 security update. It is, therefore, affected by a server spoofing vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

8.8CVSS5.4AI score0.01831EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/09 10:11 p.m.22 views

Security Bulletin: This Power System update is being released to address CVE-2023-45871

Summary The Linux kernel is used by the Virtualization Management Interface in PowerVM to support network communication with the Hardware Management Console. This bulletin provides a remediation for the impacted vulnerability, CVE-2023-45871, by upgrading PowerVM and thus addressing the exposure ...

7.5CVSS8AI score0.00544EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.22 views

CentOS 7 : java-1.7.1-ibm (RHSA-2020:3388)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3388 advisory. - In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or...

8.3CVSS6.6AI score0.0435EPSS
SaveExploits0References10
NCSC
NCSC
added 2024/10/08 7:58 p.m.13 views

Vulnerabilities fixed in Microsoft SQL Server Power BI Report Server

Microsoft fixed vulnerabilities in SQL Server Power BI Report Server A malicious party could exploit the vulnerabilities to impersonate another user and execute arbitrary code under their context, possibly with administrator privileges. Successful exploitation requires the malicious party to have...

8.8CVSS8.3AI score0.01831EPSS
SaveExploits0
OSV
OSV
added 2024/10/08 6:15 p.m.7 views

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

4.7CVSS5.8AI score0.00686EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/08 6:15 p.m.31 views

CVE-2024-43612

Power BI Report Server Spoofing Vulnerability...

6.9CVSS0.00686EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/08 6:15 p.m.25 views

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

8.8CVSS0.01831EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/08 6:15 p.m.16 views

CVE-2024-43481

Power BI Report Server Spoofing Vulnerability...

8.8CVSS5.8AI score0.01831EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/08 5:35 p.m.167 views

CVE-2024-43612

CVE-2024-43612 affects Microsoft Power BI Report Server. The issue is described as a server-side spoofing vulnerability that could allow an attacker to impersonate a user and influence the user interface, potentially enabling remote code execution under the attacker’s context in some disclosures....

6.9CVSS5.7AI score0.00686EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/08 5:35 p.m.18 views

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

6.9CVSS7.2AI score0.00686EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 5:35 p.m.33 views

CVE-2024-43612 Power BI Report Server Spoofing Vulnerability

...

6.9CVSS0.00686EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 5:35 p.m.42 views

CVE-2024-43481 Power BI Report Server Spoofing Vulnerability

...

6.5CVSS0.01831EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/08 5:35 p.m.142 views

CVE-2024-43481

CVE-2024-43481 affects Power BI Report Server with a spoofing vulnerability in the server UI. Affected component: Power BI Report Server; root cause details are not fully enumerated in the provided documents, but the issue is identified as a server spoofing vulnerability with high impact per CVSS...

8.8CVSS7.4AI score0.01831EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder