CVE-2023-34130

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm TEA with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

Denial of Service Vulnerability in Damon's Big Data Analytics Platform

Wuhan Damon Database Co., Ltd. is specialized in providing big data platform architecture consulting, data technology solution planning, product deployment and implementation in one big data platform company. A denial of service vulnerability exists in Damon's Big Data Analytics Platform, which c...

Metabase 信息泄露漏洞

Metabase is an open source data analytics platform from Metabase Inc. Metabase is vulnerable to an information disclosure vulnerability that stems from exposing sensitive information to an unauthorized user. No details of the vulnerability are currently available...

CVE-2022-44749

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

Directory traversal

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

CVE-2022-44749 Opening workflows from untrusted resources may override arbitrary file system contents

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

CVE-2022-44749

CVE-2022-44749 affects KNIME Analytics Platform 3.2.0 and later via a directory traversal in ZIP extraction (Zip-Slip). An attacker can craft a KNIME workflow that, when opened by a user, overwrites arbitrary files the user can write to, with the user only needing to open the workflow (no executi...

CVE-2022-44749 Opening workflows from untrusted resources may override arbitrary file system contents

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

PT-2022-27299 · Knime · Knime Analytics Platform

Name of the Vulnerable Software and Affected Versions: KNIME Analytics Platform versions 3.2.0 and above Description: A directory traversal vulnerability in the ZIP archive extraction routines can result in arbitrary files being overwritten on the user's system, also known as 'Zip-Slip'. An...

CVE-2022-44749: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

Knime Analytics Platform 路径遍历漏洞

Knime Analytics Platform is a free and open source data analytics, reporting and integration platform from Knime, Switzerland. A security vulnerability exists in Knime Analytics Platform, which stems from a directory traversal vulnerability in the ZIP archive extraction routines that could lead t...

CVE-2022-30579: Server-Side Request Forgery (SSRF)

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery SSRF on the affect...

TIBCO Software Spotfire Analytics Platform for AWS Marketplace 代码问题漏洞

TIBCO Software Spotfire Analytics Platform for AWS Marketplace is a suite of data visualization and analytics platforms for the cloud application store AWS from TIBCO Software, USA. A security vulnerability exists in TIBCO Software Spotfire Analytics Platform for AWS Marketplace version 12.0.0 an...

The vulnerability of the API interface of the analytics and automation platform for working with Cisco Nexus Dashboard cloud networks allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the API interface of the Cisco Nexus Dashboard platform’s analytics and automation services for cloud-based data centers is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with...

CVE-2022-36127

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection...

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

Design/Logic Flaw

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

CVE-2022-31500

CVE-2022-31500 affects KNIME Analytics Platform prior to 4.6.0. The root cause is an improper filesystem permission setting in the Windows installer, which could expose sensitive files/functions due to insufficient access restrictions. The vulnerability is tied to the Windows installer behavior r...