Lucene search
K

4549 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:6 p.m.6 views

Malicious code in u-workflow.module.common.fraud-protection (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/06/25 1:6 p.m.6 views

MAL-2024-3249 Malicious code in u-workflow.module.common.creative-size (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:6 p.m.6 views

Malicious code in u-workflow.module.common.category (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:6 p.m.3 views

Malicious code in u-workflow.components (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.5 views

Fortra FileCatalyst Security Vulnerability

Fortra FileCatalyst is a file transfer acceleration solution from Fortra, Inc. designed to accelerate and optimize file transfers across global networks. A security vulnerability exists in Fortra FileCatalyst Workflow 5.1.6 Build 135 and prior versions, which stems from the presence of a SQL...

9.8CVSS7.9AI score0.90067EPSS
Exploits5References3
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.5 views

PT-2024-4324 · Fortra · Filecatalyst Workflow

Name of the Vulnerable Software and Affected Versions: Fortra FileCatalyst Workflow versions 5.1.6 Build 135 and earlier Description: The issue is related to a SQL injection vulnerability that allows an attacker to modify application data. This can likely result in the creation of administrative...

9.8CVSS9.3AI score0.90067EPSS
Exploits5References19
IBM Security Bulletins
IBM Security Bulletins
added 2024/06/20 2:20 p.m.28 views

Security Bulletin: HTTP request smuggling vulnerability in IBM Business Automation Workflow Machine Learning Server CVE-2024-1135

Summary In addition to updates to operating system level packages, IBM Business Automation Workflow Machine Learning Server 23.0.2-IF003 addresses the following vulnerability CVE-2024-1135. Vulnerability Details CVEID:CVE-2024-1135 DESCRIPTION: Gunicorn is vulnerable to HTTP request smuggling,...

7.5CVSS7.2AI score0.02996EPSS
Exploits0Affected Software2
CNVD
CNVD
added 2024/06/19 12:0 a.m.1 views

Unspecified Vulnerability in JetBrains YouTrack (CNVD-2025-16879)

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

8.1CVSS6.5AI score0.00314EPSS
Exploits0References1
NVD
NVD
added 2024/06/18 9:15 p.m.19 views

CVE-2024-6128

A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. T...

6.9CVSS0.00537EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/06/18 9:0 p.m.19 views

CVE-2024-6128 spa-cartcms Checkout Page checkout behavioral workflow

A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. T...

6.9CVSS0.00537EPSS
Exploits1References4
CVE
CVE
added 2024/06/18 9:0 p.m.57 views

CVE-2024-6128

Spa-Cartcms (spa-cartcms) v1.9.0.6 Checkout Page has a vulnerability in the /checkout processing where manipulating the quantity argument with -10 enforces a behavioral workflow. The issue is remotely triggerable and publicly disclosed. The PT-2024-37404 entry provides concrete details and recomm...

6.9CVSS5.4AI score0.00537EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/18 9:0 p.m.15 views

CVE-2024-6128 spa-cartcms Checkout Page checkout behavioral workflow

A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. T...

6.9CVSS6.9AI score0.00537EPSS
Exploits1References4
CVE
CVE
added 2024/06/18 2:11 p.m.53 views

CVE-2024-5275

CVE-2024-5275 involves a hard-coded password in the FileCatalyst TransferAgent that can unlock the keystore and expose contents such as private keys, enabling potential MiTM on affected users. Affected products and versions: FileCatalyst Direct 3.8.10 Build 138 and earlier, and FileCatalyst Workf...

7.8CVSS7.5AI score0.00114EPSS
Exploits0References2
OSV
OSV
added 2024/06/18 11:15 a.m.3 views

CVE-2024-38506

In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows...

8.1CVSS5.8AI score0.00314EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.3 views

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

8.1CVSS6.5AI score0.00314EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.2 views

FileCatalyst Direct Security Vulnerability

FileCatalyst Direct is a pure software solution that uses a server-client architecture to manage and accelerate file transfers. A security vulnerability exists in FileCatalyst Direct 3.8.10 Build 138 and earlier and FileCatalyst Workflow 5.1.6 Build 130 and earlier, which stems from the presence ...

7.8CVSS6.6AI score0.00114EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/06/18 12:0 a.m.3 views

PT-2024-35424

Name of the Vulnerable Software and Affected Versions FileCatalyst Direct versions 3.8.10 Build 138 and earlier FileCatalyst Workflow versions 5.1.6 Build 130 and earlier Description A hard-coded password in the FileCatalyst TransferAgent can be used to unlock the keystore, allowing access to its...

7.8CVSS6.6AI score0.00114EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.5 views

SPA-Cart Security Breach

SPA-Cart is a shopping cart software from SPA-Cart, Inc. A security vulnerability exists in SPA-Cart version 1.9.0.6, which stems from the fact that incorrect manipulation of the parameter quantity can lead to the enforcement of a behavioral workflow...

6.9CVSS6.7AI score0.00537EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/06/14 1:57 p.m.14 views

CVE-2024-5731

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...

6.8CVSS0.00272EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/14 1:57 p.m.14 views

CVE-2024-5731

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...

6.8CVSS6.5AI score0.00272EPSS
Exploits0References1
Rows per page
Query Builder