8377 matches found
AXIS Camera Station Pro 安全漏洞
AXIS Camera Station Pro is a powerful and flexible video management and access control from Axis Sweden. A security vulnerability exists in AXIS Camera Station Pro versions prior to 6.4, which stems from an event reporting feature that may expose sensitive credentials on the client...
CVE-2024-45755
creationtimestamp| type| source ---|---|--- 2024-11-25 17:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113544683796812204...
CVE-2024-52814
Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...
CVE-2024-52814
CVE-2024-52814 — Helm (Argo) workflow-role privileges lack granularity : Affects Argo Helm prior to 0.45.0. The issue grants broad permissions in the workflow-role to all workflow Pods, not only those that require them, potentially impacting status reporting for certain Pods/Templates. Multiple s...
CVE-2018-9477
creationtimestamp| type| source ---|---|--- 2024-11-20 17:35:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113516486661985667 2024-11-20 19:36:29+00:00| seen| https://t.me/cvedetector/11649...
CVE-2024-11179
creationtimestamp| type| source ---|---|--- 2024-11-20 09:40:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113514621035570349 2024-11-20 09:44:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113514635516139263 2024-11-20 12:03:58+00:00| seen| https://t.me/cvedetector/115...
CVE-2024-51875
creationtimestamp| type| source ---|---|--- 2024-11-20 01:07:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113512603869406100...
CVE-2024-51824
creationtimestamp| type| source ---|---|--- 2024-11-19 22:07:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113511895246533097...
CVE-2024-52506 Graylog can leak other users' reports via concurrent PDF report rendering
Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...
Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty impacts IBM Common Licensing
Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. CVE-2023-50314 Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofin...
CVE-2024-52506: Exposure of Sensitive Information to an Unauthorized Actor
Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...
PT-2024-35346
Name of the Vulnerable Software and Affected Versions Graylog versions 6.1.0 through 6.1.1 Description Graylog is a log management platform. The reporting functionality allows the creation and scheduling of reports containing dashboard widgets displaying log messages or aggregated metrics. A flaw...
Graylog 信息泄露漏洞
Graylog is a centralized log management solution from the American company Graylog. The product supports capturing, storing, and analyzing logs in real time, among other things. An information disclosure vulnerability exists in Graylog versions 6.1.0 and 6.1.1, which stems from the reporting...
CVE-2024-11118
creationtimestamp| type| source ---|---|--- 2024-11-16 03:55:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113490612225243245 2024-11-16 06:02:28+00:00| seen| https://t.me/cvedetector/11212...
s2n-tls has undefined behavior at process exit
Impact s2n-tls uses the Linux atexit function to register functions that clean up the global state when the process exits. In multi-threaded environments, the atexit handler may clean up state which is still in use by other threads. When this occurs, the exiting process may experience a...
The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.
The vulnerability of the Telerik Report Server reporting control software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.
The vulnerability of the Telerik Report Server reporting management software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)
org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...
io.jenkins.plugins:nested-data-reporting (5.2.1) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3653.v07ea_433c90b_4)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3653.v07ea433c90b4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:nested-data-reporting 5.2.1 Source cves...