CVE-2024-22341: External Control of File Name or Path

IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management...

PT-2025-7405

Name of the Vulnerable Software and Affected Versions IBM Watson Query on Cloud Pak for Data versions 4.0.0 through 4.0.9 IBM Watson Query on Cloud Pak for Data versions 4.5.0 through 4.5.3 IBM Watson Query on Cloud Pak for Data versions 4.6.0 through 4.6.6 IBM Watson Query on Cloud Pak for Data...

CVE-2024-37363: Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action. CWE-862 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.8, including 8.3.x, do not correctly perform an authorization check in the data source...

CVE-2024-37363

The CVE-2024-37363 entry concerns Hitachi Vantara Pentaho Business Analytics Server. Affected versions include before 10.2.0.0 and before 9.3.0.8, including 8.3.x. The root cause is an improper authorization check in the data source management service (CWE-862), allowing actors to access resource...

CVE-2023-50740

In Apache Linkis =1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. We recommend users upgrade the version of Linkis to version 1.5.0...

CVE-2023-29216

In Apache Linkis =1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Versions of Apache Linkis = 1.3.0...

Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 9.5.18 to 10.4.13 jscPED-11591,jscPED-11649: Security issues fixed: CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto bsc1234554 CVE-2023-3128: Fixed...

SUSE CVE-2023-1410

Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have contro...

CVE-2025-24432

creationtimestamp| type| source ---|---|--- 2025-02-11 18:20:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbjtao772h 2025-02-11 21:33:43+00:00| seen| https://t.me/cvedetector/17749...

Security Component Privilege Escalation

The vulnerability of the Security component of the Oracle Communications Order and Service Management system is related to a data source validation error. Exploiting this vulnerability may allow an attacker, operating remotely, to gain read, modify, add, or delete access to data, or cause a parti...

CVE-2022-43773

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled...

CVE-2022-43940

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service...

Web Runtime SEC Disclosure Information Disclosure

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information through a specially...

CVE-2024-20147

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaond6oke2j 2025-02-03 07:46:56+00:00| seen| https://t.me/cvedetector/17053 2025-02-03 08:03:45+00:00| seen|...

CVE-2019-19245

creationtimestamp| type| source ---|---|--- 2025-02-02 11:26:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3789 2025-02-03 08:53:13+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lhb64vdklk2n 2025-02-06 02:39:09+00:00| seen|...

CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-24747

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadn5b372p 2025-01-27 17:40:28+00:00| seen| https://t.me/cvedetector/16472...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

GHSA-VG7J-7CWX-8WGW

creationtimestamp| type| source ---|---|--- 2025-01-19 00:37:53+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lhedcgo2e...

CVE-2017-13322

creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...