Lucene search
+L

571 matches found

Cvelist
Cvelist
added 2024/08/05 2:21 p.m.49 views

CVE-2024-21481 Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager...

8.4CVSS0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/05 12:0 a.m.15 views

PT-2024-18902 · Unknown · Resource Manager

Name of the Vulnerable Software and Affected Versions: Resource Manager affected versions not specified Description: The issue is related to memory corruption that occurs when preparing a shared memory notification for a memparcel in Resource Manager. Recommendations: At the moment, there is no...

8.4CVSS7AI score0.00114EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/06/28 5:40 a.m.19 views

Cross-site Scripting (XSS)

org.opencms: opencms-core is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper validation of .svg files, allowing users with the roles of gallery editor or VFS resource manager to upload images containing JavaScript code, which will be executed when another user accesse...

6.4CVSS6.4AI score0.0026EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/06/06 12:0 a.m.23 views

ALSA-2024:3659 Important: booth security update

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network...

5.9CVSS5.6AI score0.00535EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.22 views

PT-2024-36493 · Alkacon · Opencms

Name of the Vulnerable Software and Affected Versions: Alkacon's OpenCMS version 16 Description: Two Cross-Site Scripting issues have been discovered in Alkacon's OpenCMS, which could allow a user with sufficient privileges to create and modify web pages through the admin panel to execute malicio...

6.4CVSS7.1AI score0.00283EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.11 views

The vulnerability of the File Server Resource Manager for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the File Server Resource Manager for Windows operating systems is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.3CVSS7.7AI score0.0087EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/05/03 2:9 a.m.7 views

SUSE CVE-2024-26940

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttmresourcemanager entry only if needed The driver creates /sys/kernel/debug/dri/0/mobttm even when the corresponding ttmresourcemanager is not allocated. This leads to a crash when trying to read from...

4.4CVSS6.2AI score0.00227EPSS
SaveExploits0References16
OSV
OSV
added 2024/05/01 6:15 a.m.3 views

DEBIAN-CVE-2024-26940

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttmresourcemanager entry only if needed The driver creates /sys/kernel/debug/dri/0/mobttm even when the corresponding ttmresourcemanager is not allocated. This leads to a crash when trying to read from...

5.5CVSS5.7AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/01 6:15 a.m.6 views

UBUNTU-CVE-2024-26940

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttmresourcemanager entry only if needed The driver creates /sys/kernel/debug/dri/0/mobttm even when the corresponding ttmresourcemanager is not allocated. This leads to a crash when trying to read from...

5.5CVSS6.2AI score0.00227EPSS
SaveExploits0References13
CNVD
CNVD
added 2024/04/16 12:0 a.m.11 views

Dell Storage Resource Manager Resource Management Error Vulnerability

Dell Storage Resource Manager is a software for managing storage resources from Dell USA. A resource management error vulnerability exists in Dell Storage Resource Manager version 4.9.0.0 and earlier, which stems from the presence of session fixation and can be exploited by an unauthenticated...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/12 5:17 p.m.27 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

6.5CVSS5.7AI score0.00399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 4:59 p.m.12 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

5.9CVSS6.9AI score0.00399EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/12 4:59 p.m.73 views

CVE-2024-0157

Dell Storage Resource Manager (SRM) for Windows includes a Session Fixation vulnerability in the SRM Windows Host Agent affecting version 4.9.0.0 and earlier. An unauthenticated attacker on an adjacent network could potentially hijack a targeted user’s application session. Public details in conne...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/04/12 4:59 p.m.31 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

5.9CVSS5.9AI score0.00399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/12 12:0 a.m.8 views

Dell Storage Resource Manager 资源管理错误漏洞

Dell Storage Resource Manager is a software for managing storage resources from Dell USA. A resource management error vulnerability exists in Dell Storage Resource Manager version 4.9.0.0 and earlier, which stems from the presence of session fixation and can be exploited by an unauthenticated...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/12 12:0 a.m.10 views

PT-2024-5633 · Dell · Dell Storage Resource Manager

Name of the Vulnerable Software and Affected Versions: Dell Storage Resource Manager version 4.9.0.0 and below Description: The issue is related to a session fixation problem in the SRM Windows Host Agent. An unauthenticated attacker on an adjacent network could exploit this, potentially leading ...

6.5CVSS7.2AI score0.00399EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:5 a.m.25 views

BIT-SPARK-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

9.8CVSS9.5AI score0.2937EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/29 7:11 p.m.16 views

Security Bulletin:  IBM Content Manager Enterprise Edition Resource Manager is affected by a Remote Code Execution Cross-site Scripting vulnerability

Summary IBM Content Manager Enterprise Edition Resource Manager has addressed the following vulnerability Vulnerability Details CVEID: CVE-2018-1502 DESCRIPTION: IBM Content Manager Enterprise Edition Resource Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed...

5.4CVSS5.3AI score0.00968EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/01/20 2:15 a.m.6 views

CVE-2023-51924

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

9.8CVSS6.1AI score0.00763EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/20 2:15 a.m.8 views

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

9.8CVSS6.1AI score0.00974EPSS
SaveExploits0References3
Rows per page
Query Builder