EUVD-2018-3287

Malware in sbrugna...

EUVD-2022-2477

Malicious code in bioql PyPI...

PT-2019-18725

Name of the Vulnerable Software and Affected Versions NICE Engage versions prior to 6.6 Description The issue concerns the default configuration of NICE Engage, where an unauthenticated JMX/RMI interface is bound to all network interfaces without restrictions on MBean registration. This allows...

CVE-2018-11247

The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81...

PT-2018-10424

Name of the Vulnerable Software and Affected Versions Nasdaq BWise version 5.0 Description The issue concerns the JMX/RMI interface, which does not require authentication for an SAP BO Component. This allows remote attackers to execute arbitrary code via a session on port 81. Recommendations For...

CVE-2018-11247: Missing Authentication for Critical Function

The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81...

Default configuration

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

CVE-2018-8016

CVE-2018-8016 affects Apache Cassandra 3.8–3.11.1, where the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, allowing a remote attacker to execute arbitrary Java code via an RMI request. This is a regression of CVE-2015-0225, introduced in CASSANDRA-121...

CVE-2018-8016

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

CVE-2018-8016: Missing Authentication for Critical Function

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

PT-2015-4531

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 1.2.0 through 1.2.19 Apache Cassandra versions 2.0.0 through 2.0.13 Apache Cassandra versions 2.1.0 through 2.1.3 Description The default configuration of Apache Cassandra binds an unauthenticated JMX/RMI interface to...