CVE-2022-43940

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows attackers to disclose protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information through a specially...

CVE-2024-20147

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaond6oke2j 2025-02-03 07:46:56+00:00| seen| https://t.me/cvedetector/17053 2025-02-03 08:03:45+00:00| seen|...

CVE-2019-19245

creationtimestamp| type| source ---|---|--- 2025-02-02 11:26:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3789 2025-02-03 08:53:13+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lhb64vdklk2n 2025-02-06 02:39:09+00:00| seen|...

CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-24747

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadn5b372p 2025-01-27 17:40:28+00:00| seen| https://t.me/cvedetector/16472...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

GHSA-VG7J-7CWX-8WGW

creationtimestamp| type| source ---|---|--- 2025-01-19 00:37:53+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lhedcgo2e...

CVE-2017-13322

creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...

CVE-2024-12593

creationtimestamp| type| source ---|---|--- 2025-01-15 12:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmy73zh2c 2025-01-15 12:21:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1735 2025-01-15 12:47:45+00:00| seen|...

CVE-2024-12919

creationtimestamp| type| source ---|---|--- 2025-01-14 10:47:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oam242e 2025-01-14 10:48:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oor2n2w 2025-01-14 10:48:18+00:00| seen|...

CVE-2024-56414

creationtimestamp| type| source ---|---|--- 2025-01-02 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwsk7y622 2025-01-02 16:52:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlt3as2r 2025-01-02 17:36:30+00:00| seen|...

CVE-2024-54386

creationtimestamp| type| source ---|---|--- 2024-12-16 14:51:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113663060625539231...

CVE-2024-51460

creationtimestamp| type| source ---|---|--- 2024-12-11 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113634149856471421 2024-12-11 15:14:17+00:00| seen| https://t.me/cvedetector/12632...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

CVE-2024-11671 concerns Devolutions Remote Desktop Manager on Windows. Multiple sources confirm an improper authentication flaw in the SQL data source MFA validation, enabling an authenticated user to bypass MFA by switching data sources. Affected product/version: Devolutions Remote Desktop Manag...

PT-2024-17179 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.3.17 and earlier Description: The issue is related to improper authentication in SQL data source MFA validation, allowing an authenticated user to bypass the MFA validation via data source...