131 matches found
EUVD-2026-74794
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
CVE-2026-85978: Improper Control of Generation of Code
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
PT-2026-88937
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
EUVD-2015-0453
Malware in sbrugna...
EUVD-2016-4502
Malware in sbrugna...
EUVD-2020-22584
Malware in sbrugna...
Oracle Siebel CRM 8.5.x < 16.4 (July 2016 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2016 CPU advisory. - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM subcomponent: Information Manager Console. The supported version that is...
SUSE CVE-2020-2932
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...
PT-2022-20180
Name of the Vulnerable Software and Affected Versions TIBCO iWay Service Manager versions 8.0.6 and below Description The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains a Directory Traversal vulnerability that allows a low privileged attacker...
CVE-2022-30571: Improper Neutralization of Input During Web Page Generation
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's...
CVE-2022-30572: Improper Limitation of a Pathname to a Restricted Directory
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on the affected system. Affected releases are TIBCO...
PT-2022-4055 · Vmware · Vmware Vrealize Automation +2
Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access, Identity Manager and vRealize Automation affected versions not specified Description: The issue is related to incorrect code generation management in the administration platform of VMware Workspace One Access,...
CVE-2021-37471: Undefined Security Weakness
Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...
PT-2021-21687
Name of the Vulnerable Software and Affected Versions Cradlepoint IBR900-600 versions prior to 7.21.10 Description A restricted shell escape sequence issue allows an attacker to deny availability to the device's NetCloud Manager console, local console, and SSH command-line. This can lead to a los...
IBM Cloud Pak System Information Disclosure Vulnerability
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. An information disclosure vulnerability exists in IBM Cloud Pak System 2.3. The vulnerability originates from an insecure direct object reference in the Sales and Service Consol...
Intel Data Center Manager Console Information Disclosure
The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...
Intel Data Center Manager Console Information Disclosure Vulnerability
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. An information disclosure vulnerability exists in IntelR Data Center Manager Console versions prior to 3.6.2, which arises from...
Intel Data Center Manager Console Denial of Service Vulnerability
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A denial of service vulnerability exists in IntelR Data Center Manager Console versions prior to 3.6.2, which stems from improp...