Lucene search
+L

246 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/11 12:00 a.m.•7 views

CVE-2024-44546: Improper Neutralization of Special Elements used in an SQL Command

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•28 views

distributed computing platforms PowerJob task scheduling systems unauthorized access

The vulnerability of distributed computing platforms and the PowerJob task scheduling system is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.09545EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/04 12:00 a.m.•24 views

distributed computing platforms and Unauthorized Access

The vulnerability of distributed computing platforms and the PowerJob task scheduling system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the user/save interface...

5.3CVSS5.9AI score0.02998EPSS
SaveExploits2References3Affected Software1
Veracode
Veracode
•added 2023/08/22 5:16 a.m.•21 views

Information Disclosure

tech.powerjob:powerjob-server-remote is vulnerable to Information Disclosure. The vulnerability exists in the way that PowerJob handles the appId parameter in the /container/list interface. An attacker is able to exploit this vulnerability by sending a specially crafted request to the PowerJob...

7.5CVSS6.2AI score0.00912EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2023/08/21 9:26 a.m.•27 views

Improper Access Control

PowerJob is vulnerable to Incorrect Access Control vulnerability. The vulnerability is due to not applying sufficient authorization checks on the POST /user/save end point. This can lead to an attacker creating users without any permissions...

5.3CVSS6.8AI score0.02998EPSS
SaveExploits2References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/08/17 9:30 p.m.•42 views

PowerJob incorrect access control vulnerability

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS6.6AI score0.00912EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/08/17 9:30 p.m.•66 views

GHSA-443M-3FR6-W8WJ PowerJob incorrect access control vulnerability

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References3
NVD
NVD
•added 2023/08/17 8:15 p.m.•46 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS7.4AI score0.00912EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/17 8:15 p.m.•12 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS5.8AI score0.00912EPSS
SaveExploits0References3
Prion
Prion
•added 2023/08/17 8:15 p.m.•31 views

Improper access control

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

5CVSS7.3AI score0.00912EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/08/17 12:00 a.m.•49 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5AI score0.00912EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/08/17 12:00 a.m.•13 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

6.8AI score0.00912EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/17 12:00 a.m.•5 views

CVE-2023-36106: Improper Access Control

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/08/17 12:00 a.m.•30 views

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list...

6.8AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2023/08/17 12:00 a.m.•18 views

PowerJob security vulnerabilities

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A security vulnerability exists in powerjob version 4.3.2 and earlier versions, which stems from the presence of a buggy access control vulnerabilit...

7.5CVSS7.2AI score0.00912EPSS
SaveExploits0References3
CVE
CVE
•added 2023/08/17 12:00 a.m.•89 views

CVE-2023-36106

PowerJob is affected by an incorrect access control vulnerability in version 4.3.2 and earlier. The issue allows remote attackers to disclose sensitive information by querying the appId parameter on the /container/list interface. Public references (including Red Hat and Veracode analyses) describ...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2023/08/12 12:00 a.m.•63 views

Inventory Management System is an inventory management system. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from a SQL injection via the up_pid parameter on the edit_sell.php page. No details of the vulnerability are available at this time.

PowerJob Command Execution Vulnerability...

8CVSS7.5AI score0.01983EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/08 12:00 a.m.•23 views

Microsoft SharePoint security vulnerabilities

PowerJob Command Execution Vulnerability...

8CVSS7AI score0.01983EPSS
SaveExploits0References4
CNVD
CNVD
•added 2023/08/03 12:00 a.m.•75 views

PowerJob Command Execution Vulnerability

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...

7.5CVSS7.2AI score0.3EPSS
SaveExploits1Affected Software1
osv_ghsa
osv_ghsa
•added 2023/07/28 3:30 p.m.•27 views

GHSA-2H26-QFXM-R3PQ Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

9.8CVSS6.2AI score0.3EPSS
SaveExploits1References4
Rows per page
Query Builder