Lucene search
+L

7969 matches found

Cvelist
Cvelist
added 2024/12/02 10:18 a.m.50 views

CVE-2024-43052 Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input...

7.8CVSS0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 10:18 a.m.19 views

CVE-2024-43052 Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input...

7.8CVSS7.1AI score0.00103EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 4:23 p.m.9 views

Malicious code in omigo-data-analytics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae4cfba5955464b4ebdf67da4386ccc25b7431d6dfc11e70146b23c0a8185860 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

7.1AI score
SaveExploits0References1
OSV
OSV
added 2024/12/01 4:23 p.m.7 views

MAL-2024-12318 Malicious code in omigo-data-analytics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae4cfba5955464b4ebdf67da4386ccc25b7431d6dfc11e70146b23c0a8185860 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

7AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/27 2:26 p.m.35 views

Security Bulletin: IBM Analytics Content Hub is affected by security vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Analytics Content Hub. Additionally, IBM Analytics Content Hub is vulnerable to Buffer Overflow, Server Side Request Forgery SSRF and Improper Error Handling vulnerabilities. Please refer to the tabl...

8.8CVSS10AI score0.4644EPSS
SaveExploits5Affected Software1
OSV
OSV
added 2024/11/27 10:15 a.m.9 views

CVE-2024-52323

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS5.8AI score0.01128EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/27 10:15 a.m.22 views

CVE-2024-52323

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS0.01128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/27 9:54 a.m.32 views

CVE-2024-52323 Sensitive Data Exposure

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS0.01128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/27 9:54 a.m.10 views

CVE-2024-52323 Sensitive Data Exposure

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS6.8AI score0.01128EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/27 9:54 a.m.75 views

CVE-2024-52323

The connected sources confirm a vulnerability in ManageEngine Analytics Plus prior to version 6100 where the getOAToken method exposes sensitive tokens for the org-admin account. This allows authenticated users to retrieve tokens and may enable privilege escalation to org-admin resources. Mitigat...

8.1CVSS8AI score0.01128EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/27 12:00 a.m.15 views

PT-2024-35177 · Zohocorp · Manageengine Analytics Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Analytics Plus versions below 6100 Description: The issue allows authenticated sensitive data exposure, enabling users to retrieve sensitive tokens associated with the org-admin account. This is related to the getOAToken...

8.1CVSS6.8AI score0.01128EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/11/27 12:00 a.m.14 views

ZOHO ManageEngine Analytics Plus 安全漏洞

ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution from ZOHO. Get a better view of your IT data with rich visualizations and dashboards. A security vulnerability exists in ZOHO ManageEngine Analytics Plus prior to version 6100 that stems from vulnerability to an authenticate...

8.1CVSS6.3AI score0.01128EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/21 7:31 a.m.28 views

Security Bulletin: Vulnerability in jetty-http affects IBM Integrated Analytics System[CVE-2023-36478]

Summary The jetty-http package is used by IBM Integrated Analytics System. IBM Integrated Anayltics System has addresed the applicable CVE CVE-2023-36478. Vulnerability Details CVEID:CVE-2023-36478 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an integer overflow and...

7.5CVSS7AI score0.03754EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/20 1:56 p.m.41 views

Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM has addressed these vulnerabilities with an update. Vulnerability Details CVEID:CVE-2019-8331 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting,...

10CVSS9.2AI score0.16404EPSS
SaveExploits10Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.28 views

CVE-2024-51937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bnisia IA Map Analytics Basic ia-map-analytics-basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through = 20170413...

6.5CVSS0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.22 views

CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

6.5CVSS0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:30 p.m.74 views

CVE-2024-51937

CVE-2024-51937: WordPress WordPress plugin IA Map Analytics Basic (affected versions up to 20170413) is reported to have a DOM-based cross-site scripting (XSS) vulnerability due to improper input neutralization during page generation. The entry specifies Cross-site Scripting as the vulnerability ...

6.5CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:30 p.m.42 views

CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bnisia IA Map Analytics Basic ia-map-analytics-basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through = 20170413...

6.5CVSS0.00255EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:30 p.m.13 views

CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Information Analytics IA Map Analytics Basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through 20170413...

6.5CVSS6.9AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.11 views

WordPress plugin IA Map Analytics Basic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder