Lucene search
K

6 matches found

Cvelist
Cvelist
added 2024/07/10 4:31 p.m.16 views

CVE-2024-6644 zmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization

A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function getDefaultClassLoader of the file CalculateAlarm.java of the component AviatorScript Handler. The manipulation leads to deserialization. It is possible to launch the attack...

6.5CVSS0.00239EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/07/10 4:31 p.m.8 views

CVE-2024-6644 zmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization

A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function getDefaultClassLoader of the file CalculateAlarm.java of the component AviatorScript Handler. The manipulation leads to deserialization. It is possible to launch the attack...

6.5CVSS6.9AI score0.00239EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/07/10 12:0 a.m.1 views

ArgusDBM Code Issue Vulnerability

ArgusDBM is an open source Argus open source database integration monitoring platform from Zmops. ArgusDBM version 0.1.0 before the code problem vulnerability, the vulnerability stems from the file CalculateAlarm.java getDefaultClassLoader function will lead to deserialization...

6.5CVSS7AI score0.00239EPSS
Exploits0References5
NVD
NVD
added 2024/02/22 4:15 p.m.11 views

CVE-2023-51388

Hertzbeat is a real-time monitoring system. In CalculateAlarm.java, AviatorEvaluator is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript which can execute any static method by default script injection. Version 1.4.1 fixes this...

9.8CVSS9.8AI score0.00798EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/02/22 3:53 p.m.10 views

CVE-2023-51388 HertzBeat AviatorScript Inject RCE

Hertzbeat is a real-time monitoring system. In CalculateAlarm.java, AviatorEvaluator is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript which can execute any static method by default script injection. Version 1.4.1 fixes this...

9.8CVSS9.7AI score0.00798EPSS
Exploits1References2
CVE
CVE
added 2024/02/22 3:53 p.m.61 views

CVE-2023-51388

Hertzbeat real-time monitoring software is affected by CVE-2023-51388 due to direct execution of expressions in CalculateAlarm.java via AviatorEvaluator without a security policy, enabling AviatorScript injection. The issue is tied to Hertzbeat versions prior to 1.4.1; upgrading to version 1.4.1 ...

9.8CVSS9.8AI score0.00798EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder