Lucene search
+L

2882 matches found

CNNVD
CNNVD
•added 2022/08/09 12:00 a.m.•19 views

Microsoft Azure Batch Node Agent 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Batch Node Agent. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the...

7CVSS7.8AI score0.00394EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2022/08/03 5:27 p.m.•1377 views

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability D...

9.8CVSS8.3AI score0.99869EPSS
SaveExploits24
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32539

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue concerns handling sibling entries in the filemap get read batch function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

5.7AI score
SaveExploits0References1
Fedora
Fedora
•added 2022/07/30 1:55 a.m.•30 views

[SECURITY] Fedora 36 Update: golang-github-apache-beam-2-2.33.0~RC1-8.fc36

Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...

7.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2022/07/21 12:34 p.m.•96 views

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.1]

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

8.1CVSS6.7AI score0.05524EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•28 views

Atlassian Jira 8.0.x < 8.13.22 Server-Side Request Forgery

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 8.0.x prior to 8.13.22, 8.14.x prior to 8.20.10 or 8.21.x prior to 8.21.4. It is, therefore, affected by a vulnerability allowing a remote, authenticated user including a user who join...

6.5CVSS7.2AI score0.71616EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•28 views

Atlassian Jira < 8.20.1 Improper Authorization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.20.1. It is, therefore, affected by a vulnerability allowing authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization...

4.3CVSS7.2AI score0.0087EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•37 views

[SECURITY] Fedora 36 Update: golang-github-apache-beam-2-2.33.0~RC1-7.fc36

Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
NVD
NVD
•added 2022/06/30 1:15 p.m.•33 views

CVE-2022-33043

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

5.4CVSS0.00556EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/30 1:15 p.m.•18 views

CVE-2022-33043

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

5.4CVSS5.9AI score0.00556EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/30 1:15 p.m.•10 views

CVE-2022-33043

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

5.4CVSS5.9AI score0.00556EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/30 6:15 a.m.•31 views

Server side request forgery (ssrf)

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user including a user who joined via the sign-up feature to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0...

4CVSS6.3AI score0.71616EPSS
SaveExploits1References3Affected Software4
Vulnrichment
Vulnrichment
•added 2022/06/30 5:20 a.m.•35 views

CVE-2022-26135

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user including a user who joined via the sign-up feature to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0...

6.4AI score0.71616EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/30 12:00 a.m.•15 views

PT-2022-3496 · Atlassian · Jira +2

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions 8.0.0 through 8.13.21 Atlassian Jira Server and Data Center versions 8.14.0 through 8.20.9 Atlassian Jira Server and Data Center versions 8.21.0 through 8.22.3 Jira Management Server and Data...

7.5CVSS6.9AI score0.71616EPSS
SaveExploits1References22
CNNVD
CNNVD
•added 2022/06/30 12:00 a.m.•20 views

Emerson DeltaV Distributed Control System 信任管理问题漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. The Emerson DeltaV Distributed Control System is vulnerable to a trust...

5.5CVSS5.7AI score0.00235EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/30 12:00 a.m.•8 views

CVE-2022-33043: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

5.4CVSS6.2AI score0.00556EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/30 12:00 a.m.•4 views

CVE-2022-26135: Server-Side Request Forgery (SSRF)

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user including a user who joined via the sign-up feature to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0...

6.5CVSS6.7AI score0.71616EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/30 12:00 a.m.•23 views

Atlassian Jira Server 代码问题漏洞

Atlassian Jira Server & Data Center is the data center version of JIRA from Atlassian Australia. The software is widely used in work areas such as defect tracking, customer service, requirements gathering, process approval, task tracking, project tracking and agile management.Atlassian Jira Serve...

6.5CVSS5.5AI score0.71616EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/06/30 12:00 a.m.•6 views

PT-2022-21664

Name of the Vulnerable Software and Affected Versions Urtracker Premium version 4.0.1.1477 Description A cross-site scripting XSS vulnerability in the batch add function allows attackers to execute arbitrary web scripts or HTML via a crafted excel file. Recommendations For Urtracker Premium versi...

5.4CVSS0.00556EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/06/29 12:00 a.m.•9 views

CVE-2022-26135

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user including a user who joined via the sign-up feature to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0...

6.5CVSS5.9AI score0.71616EPSS
SaveExploits1References4Affected Software5
Rows per page
Query Builder