EUVD-2024-36364

Malicious code in bioql PyPI...

CVE-2024-36427

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

CVE-2024-36427

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

TARGIT Decision Suite 安全漏洞

TARGIT Decision Suite is a BI and analytics tool from TARGIT that helps companies integrate, visualize and share data better and faster than ever before. A security vulnerability exists in TARGIT Decision Suite version 23.2.15007, which stems from a file-serving feature that allows server files t...

CVE-2024-36427

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

CVE-2024-36427

The TARGIT Decision Suite (BI and analytics tool) contains a vulnerability in its file-serving function affecting versions prior to 24.06.19002 . Authenticated attackers can use a crafted file request to read or write arbitrary server files, which can lead to code execution via a .xview file . To...

CVE-2024-36427: Improper Limitation of a Pathname to a Restricted Directory

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

PT-2024-26994 · Targit · Targit Decision Suite

Name of the Vulnerable Software and Affected Versions: TARGIT Decision Suite versions prior to 24.06.19002 Description: The issue allows authenticated attackers to read or write to server files via a crafted file request, potentially enabling code execution via a .xview file. Recommendations: For...

CVE-2024-36427

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

CVE-2024-36426

In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session...

TARGIT Decision Suite 安全漏洞

TARGIT Decision Suite is a BI and analytics tool from TARGIT that helps companies integrate, visualize and share data better and faster than ever before. A security vulnerability exists in TARGIT Decision Suite versions prior to 23.2.15007.0 that stems from the fact that session tokens are part o...

CVE-2024-36426

In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session...

CVE-2024-36426

In TARGIT Decision Suite versions 23.2.15007.0 and earlier (released before Autumn 2023), a security vulnerability exists because the session token is included as part of the URL. This configuration allows the token to be transmitted in cleartext HTTP sessions , potentially exposing sensitive inf...

CVE-2024-36426: Cleartext Transmission of Sensitive Information

In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session...

CVE-2024-36426

In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session...