330 matches found
CVE-2022-46901
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This...
CVE-2022-46899: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any...
CVE-2022-46898: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "restore SQL data" filename. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file...
CVE-2022-46899
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any...
VulnCheck KEV: CVE-2020-0618
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...
Yapscan Denial of Service vulnerability in report server
Impact If you use the report server, it may be vulnerable to a Denial of Service attack. Patches Has been patched in v0.19.2. References The vulnerability was inherited by the following upstream vulnerabilites - golang.org/x/text v0.3.7 - golang.org/x/net 0.0.0-20220906165146-f3363e06e74c...
GHSA-WXWQ-525W-HCQX Yapscan Denial of Service vulnerability in report server
Impact If you use the report server, it may be vulnerable to a Denial of Service attack. Patches Has been patched in v0.19.2. References The vulnerability was inherited by the following upstream vulnerabilites - golang.org/x/text v0.3.7 - golang.org/x/net 0.0.0-20220906165146-f3363e06e74c...
Security Update for Microsoft Power BI Report Server (January 2023)
The Microsoft Power BI Report Server on the remote host is missing the January 2023 security update. It is, therefore, affected by a spoofing vulnerability that can result in escalation of privilege. An authenticated, remote attacker can, by tricking a user into opening a malicious file on the...
SUSE CVE-2012-3152
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the Octob...
CVE-2023-21806
Power BI Report Server Spoofing Vulnerability...
CVE-2023-21806
Power BI Report Server Spoofing Vulnerability...
CVE-2023-21806
Power BI Report Server Spoofing Vulnerability...
Spoofing
Power BI Report Server Spoofing Vulnerability...
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
...
CVE-2023-21806
CVE-2023-21806 is a spoofing vulnerability in Microsoft Power BI Report Server. Public sources indicate an authenticated, remote attacker could exploit it by deceiving a user into opening a malicious file on the server, enabling credential exposure or UI spoofing leading to privilege escalation. ...
Power BI Report Server Spoofing Vulnerability
...
KB5023884 - Description of the security update for Power BI Report Server: January 2023
None None...
KLA20230 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server can be exploited remotely t...
PT-2023-1422 · Microsoft · Power Bi Report Server
Name of the Vulnerable Software and Affected Versions: Power BI Report Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks. Recommendations: At the...