CVE-2023-49233

Visual Planning Admin Center 8 (pre-build 240207) is affected by insufficient access checks. By exploiting this, a non-administrative Visual Planning account can access functions normally reserved for administrators, potentially obtaining various configured credentials and elevating privileges to...

PT-2024-13702 · Unknown · Visual Planning Admin Center

Name of the Vulnerable Software and Affected Versions: Visual Planning Admin Center 8 versions prior to v.1 Build 240207 Description: The issue is related to insufficient access checks, allowing attackers with non-administrative accounts to utilize functions normally reserved for administrators...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

Visual Planning Admin Center 安全漏洞

Visual Planning Admin Center is a cloud-based resource management and scheduling software from Visual Planning. A security vulnerability exists in versions prior to Visual Planning Admin Center 8 Build 240207 that stems from insufficient access checking. An attacker could exploit the vulnerabilit...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for vulnerability impact...

[SECURITY] Fedora 40 Update: zabbix-6.0.33-1.fc40

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

GO-2022-0939 Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker

Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker...

CVE-2024-42563

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2024-42564

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete...

PT-2024-30025 · Erp · Erp

Name of the Vulnerable Software and Affected Versions: ERP version 44bd04 Description: A SQL injection issue was discovered via the id parameter at the "/index.php/basedata/contact/delete?action=delete" endpoint. This allows for potential exploitation. Recommendations: For ERP version 44bd04,...

Exploit for Incorrect Authorization in Apache Ofbiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz is an open source...

Security Bulletin: IBM Planning Analytics is affected by vulnerabilities in IBM Java and IBM Websphere Application Server Liberty

Summary There are vulnerabilities in IBM® Java™ Version 8 and IBM WebSphere Application Server Liberty used by both IBM Planning Analytics and IBM Planning Analytics Workspace. With respect to IBM Planning Analytics, applicable CVEs have been addressed by upgrading to non-vulnerable versions of...

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 allows a malicious individual to escalate their privileges.

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Apache OFBiz Authorization Error Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. An authorization error vulnerability exists in Apache OFBiz versions 18.12.14 and earlier, which could be...

IBM Planning Analytics Local Authentication Error Vulnerability

IBM Planning Analytics Local is a web-based local architecture from International Business Machines IBM. An authentication error vulnerability exists in IBM Planning Analytics Local versions 2.0 and 2.1 that originates from a connection to a MongoDB server that does not require password...

The vulnerability of the Override View function in the Apache OFBiz resource planning software allows a hacker to execute arbitrary code.

The vulnerability of the Override View function in the Apache OFBiz enterprise resource planning software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests remotely...

Apache OFBiz 安全漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. An authorization error vulnerability exists in Apache OFBiz versions 18.12.14 and earlier, which could be...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...