16840 matches found
CVE-2024-35155: Generation of Error Message Containing Sensitive Information
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765...
ioctl Component DoS
The vulnerability of the ioctl device for application and Flatpak environments relates to the copying of text from the virtual console and its insertion into the command buffer, from which commands can be executed after the Flatpak application is closed. Exploiting this vulnerability could allow ...
ImageMagick tiff.c DoS
The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2024-26342 · Ibm · Ibm Mq Console
Name of the Vulnerable Software and Affected Versions: IBM MQ Console versions 9.3 LTS and 9.3 CD Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...
CVE-2024-39669
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security and extras update
Red Hat OpenShift Container Platform release 4.16.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
CVE-2024-39669
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...
CVE-2024-28982: Improper Restriction of Recursive Entity References in DTDs
Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference...
PT-2024-22661 · Hitachi Vantara · Pentaho Business Analytics Server
Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics Server versions prior to 10.1.0.0 Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.3.0.7 Hitachi Vantara Pentaho Business Analytics Server version 8.3.x Description: The issue...
MAL-2024-5287 Malicious code in jupyter-pytest-fi-console (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in jupyter-pytest-fi-console (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4992 Malicious code in console-logs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in console-logs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2577 Malicious code in karma-console-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in karma-console-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2019 Malicious code in console-webapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in console-webapp (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-5561 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions 23.2R2-EVO through 23.2R2-S1-EVO Junos OS Evolved versions 23.4R1-EVO through 23.4R2-EVO Description: An issue in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access ...
Exploit for Race Condition in Solarwinds Solarwinds_Platform
CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform...
GHSA-C25H-C27Q-5QPV Keycloak leaks configured LDAP bind credentials through the Keycloak admin console
Impact The LDAP testing endpoint allows to change the Connection URL independently of and without having to re-enter the currently configured LDAP bind credentials. An attacker with admin access permission manage-realm can change the LDAP host URL "Connection URL" to a machine they control. The...