Lucene search
+L

177 matches found

CNNVD
CNNVD
added 2023/08/17 12:00 a.m.9 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A security vulnerability exists in powerjob version 4.3.2 and earlier versions, which stems from the presence of a buggy access control vulnerabilit...

7.5CVSS7.2AI score0.00912EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/08/17 12:00 a.m.11 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

6.8AI score0.00912EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/08/17 12:00 a.m.39 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5AI score0.00912EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/08/12 12:00 a.m.50 views

Inventory Management System is an inventory management system. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from a SQL injection via the up_pid parameter on the edit_sell.php page. No details of the vulnerability are available at this time.

PowerJob Command Execution Vulnerability...

8CVSS7.1AI score0.01983EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.8 views

Microsoft SharePoint 安全漏洞

PowerJob Command Execution Vulnerability...

8CVSS7AI score0.01983EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/08/03 12:00 a.m.67 views

PowerJob Command Execution Vulnerability

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...

7.5CVSS7.2AI score0.3EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2023/07/28 3:30 p.m.13 views

GHSA-2H26-QFXM-R3PQ Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS6.2AI score0.3EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/07/28 3:30 p.m.26 views

Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS7.4AI score0.3EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/28 3:15 p.m.6 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS7.6AI score0.3EPSS
SaveExploits1References4
NVD
NVD
added 2023/07/28 3:15 p.m.34 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS9.7AI score0.3EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/28 3:15 p.m.20 views

Command injection

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

7.5CVSS9.7AI score0.3EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/07/28 12:00 a.m.74 views

CVE-2023-37754

CVE-2023-37754 affects PowerJob v4.3.3. The vulnerability is a remote command execution (RCE) via the instanceId parameter in the /instance/detail endpoint. The root cause is improper validation/filtering of constructor commands in the instanceId input, enabling arbitrary code/command execution o...

9.8CVSS9.6AI score0.3EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/07/28 12:00 a.m.28 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

7.9AI score
SaveExploits0References5
CNNVD
CNNVD
added 2023/07/28 12:00 a.m.14 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...

9.8CVSS7.4AI score0.3EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/07/28 12:00 a.m.15 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

7.9AI score0.3EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/07/28 12:00 a.m.41 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.9AI score0.3EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.15 views

PT-2023-26094 · Powerjob · Powerjob

Name of the Vulnerable Software and Affected Versions: PowerJob version 4.3.3 Description: A remote command execution issue was discovered, allowing exploitation via the instanceId parameter at the "/instance/detail" API endpoint. Recommendations: For PowerJob version 4.3.3, consider restricting...

9.8CVSS9.4AI score0.3EPSS
SaveExploits1References8
GithubExploit
GithubExploit
added 2023/05/23 6:06 a.m.403 views

Exploit for Incorrect Default Permissions in Powerjob

CVE-2023-29923 1. Prepare a url.txt file,...

5.3CVSS6AI score0.09545EPSS
SaveExploits3
Veracode
Veracode
added 2023/05/19 6:32 a.m.8 views

Remote Code Execution (RCE)

powerjob-server-core is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library fails to implement access control, which allows an attacker to inject and execute malicious code through the template generator...

9.8CVSS7.5AI score0.01081EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2023/05/16 4:21 a.m.17 views

Remote Code Execution (RCE)

powerjob is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the library's lack of user input validation, which allows an attacker to inject and execute malicious code...

9.8CVSS7.6AI score0.01171EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder