6848 matches found
CVE-2024-26266
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...
CVE-2024-25149
Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not properly restrict membership of a child site when the "Limit membership to members of the parent site" option is enabled,...
Default configuration
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-22335
IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279975...
CVE-2024-22336
IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279976...
Intel Thunderbolt DCH drivers security vulnerability
Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in previous versions of Intel Thunderbolt DCH drivers 88, which stems from an improper access control issue that could cause an authenticated user to enable denial of service via loca...
PT-2024-19335 · Ibm · Ibm Storage Defender - Resiliency Service
Name of the Vulnerable Software and Affected Versions: IBM Storage Defender - Resiliency Service version 2.0 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM Storage Defender - Resiliency Service version 2.0, consider...
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Description The plugin does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. e.g. draft, private, pending review, pw-protected, and trashed events. 1. ADMIN: Install Event Tickets 2. ADMIN: Install Event Tickets Plus...
OpenObserve Security Vulnerability
OpenObserve is a cloud-native observability platform open-sourced by OpenObserve. A security vulnerability exists in OpenObserve versions prior to 0.8.0 that stems from an elevation of privilege vulnerability in the User Api...
OpenObserve Security Vulnerability
OpenObserve is a cloud-native observability platform open-sourced by OpenObserve. A security vulnerability exists in OpenObserve versions prior to 0.8.0 that stems from an unauthorized access vulnerability in the User Api...
CVE-2023-31002
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254657...
CVE-2024-22022
Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service...
PT-2024-12253 · Ibm · Ibm Security Access Manager Container
Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1 Description: The issue is related to the temporary storage of sensitive information in files that could be accessed by a local user. Recommendations: For versions 10.0.0...
IBM Security Verify Access Elevation of Privilege Vulnerability
IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...
PT-2024-14597 · Arm · Arm Valhall Gpu Kernel Driver +1
Name of the Vulnerable Software and Affected Versions: Arm Ltd Bifrost GPU Kernel Driver versions r35p0 through r40p0 Arm Ltd Valhall GPU Kernel Driver versions r35p0 through r40p0 Description: The issue allows a local non-privileged user to make improper memory processing operations to exploit a...
IBM Security Verify Access Denial of Service Vulnerability
IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...
CVE-2024-21485
Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...
CVE-2023-50941
CVE-2023-50941 affects IBM PowerSC versions 1.3, 2.0 and 2.1. The vulnerability arises from the lack of logout functionality, enabling a session fixation scenario where an authenticated user could gain access to an unauthorized user’s session. Public sources (e.g., Red Hat advisory) reiterate the...
Optimizing Data Lakes: Streamlining Storage with Effective Object Management
Data lakes are a popular solution for data storage, and for good reason. Data lakes are flexible and cost effective, as they allow multiple query engines and many object formats without the need to manage resources like disks, CPUs, and memory. In a data lake, data is simply stored in an object...
