Pegasystem PEGA Platform 安全漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem, USA. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security vulnerability exists...

VulnCheck KEV: CVE-2024-36111

KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration file when the...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +84 more potentially affected by CVE-2024-52810 via vue-i18n (>=9.7.0, <=9.14.1)

vue-i18n NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.0.1711457390679, =0.0.0, =1.0.0-beta.7, =1.2.2 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

@intlify/cli (>=0.9.0, <=0.11.3), @sfxcode/formkit-primevue (>=2.5.4, <=2.7.0) +5 more potentially affected by CVE-2024-52809 via @intlify/core (>=9.3.0-beta.27, <=9.14.1)

@intlify/core NPM version =9.3.0-beta.27, =0.9.0, =2.5.4, =2.14.1, =1.9.0, =1.16.0 - we-i18n 0.1.1 Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

Palantir Foundry 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in Palantir Foundry versions 105.110.1 through 105.115.0, which stems from Objects Supported by Restricted Views OSV1 can be bypassed, allowing users not authorized to view such...

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

PT-2024-31662 · Unknown · Fieldserver Gateway

Name of the Vulnerable Software and Affected Versions: MSA FieldServer Gateway versions 5.0.0 through 6.5.2 Description: The issue allows cross-origin WebSocket hijacking. This means that an attacker can potentially hijack WebSocket connections from a different origin, which could lead to...

PT-2024-27094 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip versions 8.0 through 8.3 Description: The issue is related to a memory leak vulnerability in the handling of popovers. This vulnerability occurs in the specified versions of Zulip. Recommendations: For versions 8.0 through 8.3, update t...

IBM Cloud Pak for Data 安全漏洞

IBM Cloud Pak for Data is a cloud-native solution from International Business Machines IBM that allows customers to use data and analyze it quickly and efficiently. A resource management error vulnerability exists in IBM Cloud Pak for Data versions 4.0.0 through 5.0.2, which stems from not proper...

PT-2024-33556 · Oracle · Oracle-Sidecar

Name of the Vulnerable Software and Affected Versions: oracle-sidecar versions 0.347.0 through 0.543.0 Description: The issue concerns SQL injections in multiple endpoints. An unauthenticated attacker can compromise data. Recommendations: For versions 0.347.0 through 0.543.0, upgrade the affected...

PT-2024-34832 · Unknown · Manage User Columns

Name of the Vulnerable Software and Affected Versions: Manage User Columns versions 1.0.0 through 1.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the use...

PT-2024-35040 · Unknown · Gonzalo Geraldo Adventure Bucket List

Name of the Vulnerable Software and Affected Versions: Gonzalo Geraldo Adventure Bucket List versions 1.0.0 through 1.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS, which can ...

PT-2024-33182 · Unknown · Officeweb365

Name of the Vulnerable Software and Affected Versions: OfficeWeb365 versions 7.18.23.0 through 8.6.1.0 Description: The issue allows a remote attacker to execute arbitrary code via the "pw/savedraw" component. This enables the attacker to upload files that can lead to code execution, potentially...

UBUNTU-CVE-2024-52303

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each...

@1023-ventures/vega-core (>=0.5.0, <=0.6.2), @copart/ops-tool-kit (>=1.11.4-alpha.2, <=1.12.13-alpha.1) +44 more potentially affected by CVE-2024-11023 via firebase (>=10.0.0, <=10.8.1)

firebase NPM version =10.0.0, =0.5.0, =1.11.4-alpha.2, =0.0.3-3, =0.0.7-20, =0.0.1-dev.1, =1.0.0, =1.0.0, =0.5.0, =0.0.1, =8.18.0, =1.0.10, =1.0.9, =0.0.2, =1.0.39, =1.0.24, =1.0.128 and more Source cves: CVE-2024-11023 Source advisory: OSV:GHSA-3WF4-68GX-MPH8...

Apache Tomcat 9.0.0-M1 < 9.0.96 / 9.0.92 < 9.0.96 Multiple Vulnerabilities

Binary data 701495.pasl...

PT-2024-38093 · Unknown · Dingo Dlibra

Name of the Vulnerable Software and Affected Versions: DInGO dLibra software versions 6.0 through 6.3.19 Description: The issue is related to improper neutralization of input during web page generation, allowing a Reflected Cross-Site Scripting XSS attack. This occurs in the filter parameter of t...

Apache Traffic Server 安全漏洞

Apache Traffic Server ATS is a suite of scalable HTTP proxy and caching servers from the Apache Foundation in the United States. A security vulnerability exists in Apache Traffic Server versions 9.2.0 through 9.2.5, which stems from a valid Host header field that could cause the server to crash o...

Stormshield Network Security 安全漏洞

Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A security vulnerability exists in Stormshield Network Security versions 4.0.0 through 4.3.31 and 4.4.0 through 4.8.3, which stems from an attacker's ability to bypass...

PT-2024-31720 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 through 12.1 Description: The issue is related to a denial of service condition where the server may crash under certain conditions when processing a specially...