EUVD-2020-8805

Malware in sbrugna...

EUVD-2016-3110

Malware in sbrugna...

CVE-2024-34008 moodle: CSRF risk in analytics management of models

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

CVE-2024-34008 moodle: CSRF risk in analytics management of models

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

HPE Vertica Arbitrary Command Execution

The vulnerability of the validateAdminConfig handler in the Analytics Management Console of the HPE Vertica database management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the...

CVE-2016-2002

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

Command injection

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

CVE-2016-2002: Improper Neutralization of Special Elements used in a Command

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

PT-2016-1844

Name of the Vulnerable Software and Affected Versions HPE Vertica versions 7.0.x through 7.0.2.11 HPE Vertica versions 7.1.x through 7.1.2-11 HPE Vertica versions 7.2.x through 7.2.1 Description The issue is related to the validateAdminConfig handler in the Analytics Management Console of the HPE...