CVE-2020-17542

Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...

Cross site scripting

Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...

CVE-2020-17542

Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...

dotCMS 跨站脚本漏洞

Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS v5.1.5, which can be exploited by a remote...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2158

CVE-2021-2158 affects Oracle Hyperion Financial Management (HFM) with the Task Automation component, specifically version 11.1.2.4. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a vulnerability that is exploitable by a high-privileged attacker with network access over HTTP, with us...

Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Unspecified Vulnerability in Oracle Hyperion Financial Management (CNVD-2021-33843)

Oracle Hyperion Financial Management is a comprehensive Web-based application that provides global financial consolidation, reporting, and analysis capabilities through a highly scalable software solution. A security vulnerability exists in the Task Automation component of Oracle Hyperion Financi...

Oracle Hyperion Financial Management 安全漏洞

Oracle Hyperion Financial Management is a comprehensive Web-based application that provides global financial consolidation, reporting, and analysis capabilities through a highly scalable software solution. A security vulnerability exists in the Task Automation component of Oracle Hyperion Financi...

VulnCheck KEV: CVE-2019-1069

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations...

MoveKit - Cobalt Strike Kit For Lateral Movement

Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a...

How Philip Reiner Created the Ransomware Task Force

In our latest episode of Security Nation, we talk to Philip Reiner about his work with the Ransomware Task Force. Stick around for our Rapid Rundown, where Tod talks about a recently released bulletin from CISA about APT exploiting both new and old SAP vulnerabilities. Want More Inspiring Stories...

flask-authoob (>=0.0.21 <=0.0.34), pidb (=6.0.1) +1 more potentially affected by unknown CVE via flask-security-too (>=3.2.0rc1 <=3.3.3)

flask-security-too PYPI version =3.2.0rc1, =0.0.21, =6.0.0, =6.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FXQ4-R6MR-9X64...

CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

Directory traversal

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13419

CVE-2020-13419 concerns OpenIAM before 4.2.0.3, where a directory traversal vulnerability exists in the Batch task. The available connected sources confirm the affected product is OpenIAM (identity and access management platform) and the root cause is a directory traversal issue in batch task pro...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...