EUVD-2024-32689

Malicious code in bioql PyPI...

Snow Software Snow License Manager 授权问题漏洞

Snow Software Snow License Manager SLM is the central hub of the Snow Software Asset Management platform from Snow Software, Sweden. An authorization issue vulnerability exists in Snow Software Snow License Manager versions 9.33.2 through 9.34.0 that stems from incorrect authentication and allows...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

The vulnerability of the Snow License Manager Service Provider Edition software, related to privilege management errors, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Snow License Manager Service Provider Edition software-related license management software is related to privilege management errors. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...

CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3864 SQL injection vulnerability in Snow License Manager

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...

CVE-2023-3864 SQL injection vulnerability in Snow License Manager

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...

Snow Software Snow License Manager Cross-Site Scripting Vulnerability

Snow Software Snow License Manager SLM is the central hub of the Snow Software Asset Management platform from Snow Software, Sweden. A cross-site scripting vulnerability exists in Snow Software Snow License Manager versions 8.0.0 through 9.30.1, which originates from a cross-site scripting attack...

Snow License Manager 代码问题漏洞

Snow License Manager SLM is the central hub of Snow's Snow Software Asset Management platform. A security vulnerability exists in Snow License Manager versions 9.xx through prior to 9.20.1 that stems from a security issue related to Windows Unquoted/Trusted service paths...