Microsoft Office 代码问题漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A code issue vulnerability exists in Microsoft Office. An attacker exploiting this...

omni 信息泄露漏洞

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. An information disclosure vulnerability exists in omni versions prior to 1.1.5 and prior to 1.0.2, which stems from an API that may disclose sensitive information...

Omni 安全漏洞

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. A security vulnerability exists in Omni versions prior to 1.1.5 and prior to 1.0.2, which stems from the isSensitiveSpec function not checking if the metadata field of resource is null, which could lead to null pointer...

extloader

extLoader A small toolkit for managing and deploying unpacked...

executorch 安全漏洞

executorch is a PyTorch deployment tool from pytorch open source. A security vulnerability exists in executorch that stems from a heap buffer overflow when loading ExecuTorch methods, which could lead to code execution...

ROS-20250424-12

A vulnerability in the eval function of the Cloud Deployment and Query Tool modules of the database management tool pgAdmin 4 is related to incorrect code generation control when processing endpoints /sqleditor/querytool/download and /cloud/deploy with querycommitted and highavailability...

Octopus Server 安全漏洞

Octopus Server is a deployment automation and release management tool for continuous delivery from Octopus Australia. A security vulnerability exists in Octopus Server that stems from a cookie using the wrong expiration time...

The vulnerability of the Command Line Interface (CLI) of the deployment and application management automation tool in Docker-enabled environments allows a attacker to obtain arbitrary credentials.

The vulnerability of the Command Line Interface CLI of the deployment and application management tool in Docker-enabled environments is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain arbitrary user...

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to uncontrolled resource consumption, allows a malicious actor to trigger service failures.

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

Design/Logic Flaw

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to a Cross‑Site Scripting (XSS) vulnerability in the Deployment tool (Add Agent/Proxy). The issue affects Nagios XI deployments prior to 5.7.5 and is described across multiple sources (CVE-2020-27990; CNVD-2020-63972). Root cause and exact exploit details are ...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool allows a attacker to execute arbitrary code.

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ceph-deploy admin command copies keyring file to /etc/ceph which is world readable

It was discovered that ceph-deploy, a utility for deploying Red Hat Ceph Storage, would create the keyring file with world readable permissions, which could possibly allow a local user to obtain authentication credentials from the keyring file...

Multiple HP Ignite-UX deployment tool vulnerabilities

/etc/passwd copy is available via TFTP, TFTP filesystem is world writable...

Language Accessory Pack for Microsoft 365

None None...