GHSA-P3R5-X3HR-GPG5 OpenRefine Remote Code execution in project import with mysql jdbc url attack

Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...

GHSA-QQH2-WVMV-H72M OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack

Summary An arbitrary file read vulnerability allows any unauthenticated user to read the file on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker...

Design/Logic Flaw

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform Version Management System - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or...

CVE-2023-37489 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform Version Management System - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or...

CVE-2023-37489 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform Version Management System - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or...

Zoom Client Input Validation Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An input validation error vulnerability exists in Zoom Client versions prior to 5.15.10, which stems from the presence of incorrect input validation that could allow an unauthenticated user to...

Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS

Description The plugin does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators As an unauthenticated user, submit a booking form such form can be added via the Booking Calendar Block on a...

Amazon Linux 2 : cups (ALAS-2023-2228)

The version of cups installed on the remote host is prior to 1.6.3-51. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2228 advisory. An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey...

Oracle Linux 8 : edk2 (ELSA-2019-3338)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3338 advisory. 20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 -...

AlmaLinux 8 : cups (ALSA-2023:4864)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4864 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An...

Oracle Linux 8 : cups (ELSA-2023-4864)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4864 advisory. 1:2.2.6-51.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : cups (ELSA-2023-4838)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4838 advisory. 1:2.3.3op2-16.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from...

K000135996: Intel RDMA Ethernet Controller vulnerability CVE-2023-25775

Security Advisory Description Improper access control in the IntelR Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access. CVE-2023-25775 Impact There is no impact; F5 products are not...

CVE-2023-3425

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

CVE-2023-3425

CVE-2023-3425 affects M-Files Server: out-of-bounds read allowing an unauthenticated user to read a restricted number of bytes from memory. Affected versions are M-Files Server

CVE-2023-27515

Cross-site scripting XSS for the IntelR DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-36392

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-36351

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Cross site scripting

Cross-site Scripting XSS in some IntelR Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Input validation

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...