CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting XSS vulnerability via the ajax.php script in CCM 3.1.5...

CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting XSS vulnerability via the ajax.php script in CCM 3.1.5...

UBUNTU-CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting XSS vulnerability via the ajax.php script in CCM 3.1.5...

CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting XSS vulnerability via the ajax.php script in CCM 3.1.5...

CVE-2022-38254

Nagios XI before v5.8.7 contains an XSS vulnerability in the ajax.php script within CCM 3.1.5. The issue allows injection of malicious scripts if a user visits or interacts with affected pages. Affected product: Nagios XI; affected component: ajax.php in CCM 3.1.5; root cause: cross‑site scriptin...

CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting XSS vulnerability via the ajax.php script in CCM 3.1.5...

PT-2022-24315 · Ccm +1 · Ccm +1

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.8.7 Description: The issue is related to a cross-site scripting XSS vulnerability. It affects the ajax.php script in CCM 3.1.5. This vulnerability can be exploited, potentially allowing attackers to inject...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

Information disclosure

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

The CVE-2022-34659 vulnerability affects Simcenter STAR-CCM+ (all versions) when the Power-on-Demand public license server is used. The issue is an information disclosure where applications expose the user, host, and display name of users, enabling an attacker to retrieve this data. Mitigations f...

Siemens Simcenter STAR-CCM+ 信息泄露漏洞

Simcenter STAR-CCM is a multiphysics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. an information disclosure vulnerability exists in Siemens Simcenter STAR-CCM due to the use of a public license server where the affected application...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

GHSA-C4MP-H3M2-H5MC Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Siemens Simcenter STAR-CCM Viewer Scene File Parsing Vulnerability

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

Memory corruption

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...