Lucene search
+L

203 matches found

Github Security Blog
Github Security Blog
added 2023/08/17 9:30 p.m.35 views

PowerJob incorrect access control vulnerability

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS6.6AI score0.00912EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2023/08/17 8:15 p.m.41 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS7.4AI score0.00912EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/17 8:15 p.m.7 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS5.8AI score0.00912EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/17 8:15 p.m.25 views

Improper access control

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

5CVSS7.3AI score0.00912EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/08/17 12:00 a.m.76 views

CVE-2023-36106

PowerJob is affected by an incorrect access control vulnerability in version 4.3.2 and earlier. The issue allows remote attackers to disclose sensitive information by querying the appId parameter on the /container/list interface. Public references (including Red Hat and Veracode analyses) describ...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/08/17 12:00 a.m.25 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

6.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/08/17 12:00 a.m.11 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

6.8AI score0.00912EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/17 12:00 a.m.12 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A security vulnerability exists in powerjob version 4.3.2 and earlier versions, which stems from the presence of a buggy access control vulnerabilit...

7.5CVSS7.2AI score0.00912EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/08/17 12:00 a.m.44 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5AI score0.00912EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/08/12 12:00 a.m.53 views

Inventory Management System is an inventory management system. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from a SQL injection via the up_pid parameter on the edit_sell.php page. No details of the vulnerability are available at this time.

PowerJob Command Execution Vulnerability...

8CVSS7.1AI score0.01983EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.11 views

Microsoft SharePoint 安全漏洞

PowerJob Command Execution Vulnerability...

8CVSS7AI score0.01983EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/08/03 12:00 a.m.67 views

PowerJob Command Execution Vulnerability

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...

7.5CVSS7.2AI score0.3EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2023/07/28 3:30 p.m.14 views

GHSA-2H26-QFXM-R3PQ Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS6.2AI score0.3EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/07/28 3:30 p.m.29 views

Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS7.4AI score0.3EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/28 3:15 p.m.6 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS7.6AI score0.3EPSS
SaveExploits1References4
NVD
NVD
added 2023/07/28 3:15 p.m.36 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS9.7AI score0.3EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/28 3:15 p.m.21 views

Command injection

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

7.5CVSS9.7AI score0.3EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/07/28 12:00 a.m.30 views

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

7.9AI score
SaveExploits0References5
CVE
CVE
added 2023/07/28 12:00 a.m.82 views

CVE-2023-37754

CVE-2023-37754 affects PowerJob v4.3.3. The vulnerability is a remote command execution (RCE) via the instanceId parameter in the /instance/detail endpoint. The root cause is improper validation/filtering of constructor commands in the instanceId input, enabling arbitrary code/command execution o...

9.8CVSS9.6AI score0.3EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/07/28 12:00 a.m.16 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...

9.8CVSS7.4AI score0.3EPSS
SaveExploits1References3
Rows per page
Query Builder