DbGate 安全漏洞

DbGate is a database manager from the DbGate open source. A security vulnerability exists in DbGate 6.6.0 and earlier versions, which stems from insufficient file path validation and could lead to unauthorized file access...

dag-factory 操作系统命令注入漏洞

dag-factory is an Astronomer open source by building Apache Airflow DAG. An operating system command injection vulnerability exists in dag-factory 0.23.0a8 and earlier versions, which stems from a misconfiguration of the cicd.yml workflow and could lead to arbitrary code execution...

CVE-2025-32019

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...

CVE-2024-48730

The default configuration in ETSI Open-Source MANO OSM v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions on the authentication attempts performed by the default admin user, allowing a remote attacker to escalate privileges...

CVE-2024-48729

An issue in ETSI Open-Source MANO OSM 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote authenticated attacker to escalate privileges via the /osm/admin/v1/users component...

PT-2025-30846 · Etsi · Etsi Open-Source Mano

Name of the Vulnerable Software and Affected Versions: ETSI Open-Source MANO OSM versions 14.x through 15.x Description: The software does not impose restrictions on authentication attempts performed by an administrator user, potentially allowing a remote attacker to escalate privileges...

CVE-2024-48729

An issue in ETSI Open-Source MANO OSM 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote authenticated attacker to escalate privileges via the /osm/admin/v1/users component...

CVE-2024-48729

An issue in ETSI Open-Source MANO OSM 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote authenticated attacker to escalate privileges via the /osm/admin/v1/users component...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a DMA mapping failure that could lead to memory corruption...

CVE-2024-48729

The CVE-2024-48729 issue affects ETSI Open-Source MANO (OSM) versions 14.x (before 14.0.3), 15.x (before 15.0.2), 16.0.0, and 17.0.0. A remote authenticated attacker can escalate privileges via the /osm/admin/v1/users component. The connected sources confirm the vulnerability path but do not prov...

Open Source MANO 安全漏洞

Open Source MANO OSM is an open source software for managing and orchestrating future networks from Open Source MANO, Inc. A security vulnerability exists in Open Source MANO OSM versions 14.x and 15.x that stems from an unrestricted administrator authentication attempt that could result in...

Open Source MANO 安全漏洞

Open Source MANO OSM is an open source software for managing and coordinating future networks from Open Source MANO, Inc. A security vulnerability exists in Open Source MANO OSM versions 14.x and 15.x, which originates in the /osm/admin/v1/users component could lead to elevation of privilege...

CVE-2024-48730

CVE-2024-48730 affects ETSI Open-Source MANO (OSM) versions 14.x–17.x. The issue arises from a default admin account that does not limit authentication attempts, enabling a remote attacker to escalate privileges. Evidence in multiple feeds (including Red Hat and CNNVD/CVE records) confirms the co...

CVE-2024-48730

The default configuration in ETSI Open-Source MANO OSM v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions on the authentication attempts performed by the default admin user, allowing a remote attacker to escalate privileges...

CVE-2024-48730

The default configuration in ETSI Open-Source MANO OSM v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions on the authentication attempts performed by the default admin user, allowing a remote attacker to escalate privileges...

deer-wms-2 注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source . The vulnerability exists in deerwms deer-wms-2 3.3 and earlier versions, the vulnerability stems from incorrect manipulation of the parameter paramsdataScope in the file /system/user/list resulting in SQL injection...

1000 Projects ABC Courier Management System 注入漏洞

1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. An injection vulnerability exists in version 1.0 of the 1000 Projects ABC Courier Management System, which is caused by a SQL injection due to incorrect operation of the parameter reciverna...

deer-wms-2 SQL注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source. A security vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from SQL injection due to incorrect manipulation of paramsdataScope in the file /system/role/authUser/allocatedList...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

PT-2025-30845 · Etsi · Etsi Open-Source Mano

Name of the Vulnerable Software and Affected Versions: ETSI Open-Source MANO OSM versions 14.x through 15.x Description: An issue allows a remote attacker to escalate privileges via the /osm/admin/v1/users component. Recommendations: ETSI Open-Source MANO OSM versions 14.x and 15.x are affected. ...