461 matches found
EUVD-2020-30971
Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...
CVE-2020-36934
The CVE-2020-36934 entry concerns Deep Instinct Windows Agent 1.2.24.0, exposing an unquoted service path in the DeepNetworkService. The vulnerability allows a local user to inject code that could run with LocalSystem privileges during service startup via the path C:\Program Files\HP Sure Sense\D...
CVE-2020-36934
Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject...
CVE-2025-12984 Advanced Ads – Ad Manager & AdSense <= 2.0.15 - Authenticated (Admin+) SQL Injection
The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 2.0.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...
WordPress plugin Advanced Ads – Ad Manager & AdSense SQL injection vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
PT-2026-1493
Name of the Vulnerable Software and Affected Versions WPShop.Ru AdsPlace'r – Ad Manager, Inserter, AdSense Ads versions through 1.1.5 Description The software contains a flaw related to improper input handling during web page creation, leading to a DOM-Based Cross-site Scripting XSS condition. Th...
EUVD-2025-204757
Malicious code in cloudy-uvi-sense-v11 npm...
Malicious code in cloudy-uvi-sense-v11 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-192691 Malicious code in cloudy-uvi-sense-v11 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198363
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...
CVE-2025-61138
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...
CVE-2025-61138
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...
CVE-2025-61138
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...
PT-2025-47638
Name of the Vulnerable Software and Affected Versions Qlik Sense Enterprise version 14.212.13 Description An information leak exists through the ''/dev-hub/'' directory. Recommendations Restrict access to the ''/dev-hub/'' directory...
CVE-2025-61138
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...
Qlik Sense Enterprise 安全漏洞
Qlik Sense Enterprise is a data analytics platform from Qlik USA. A security vulnerability exists in Qlik Sense Enterprise version v14.212.13, which originates in the /dev-hub/ directory could lead to information disclosure...
CVE-2025-61138
CVE-2025-61138 affects Qlik Sense Enterprise v14.212.13. The issue is an information leak via the '/dev-hub/' directory, exposing potentially sensitive data. The CVE metadata indicates a high-severity impact (CVSS v3.1: 7.5) with network attack vector and no user interaction required. Some connec...
CVE-2025-3465
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12...
CVE-2025-3465 Path Traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12...
ABB CoreSense HM和ABB CoreSense M10 路径遍历漏洞
ABB CoreSense HM and ABB CoreSense M10 are both sensors that detect transformer oil from ABB Switzerland. A path traversal vulnerability exists in ABB CoreSense HM version 2.3.1 and earlier and ABB CoreSense M10 version 1.4.1.12 and earlier, which stems from an improperly restricted pathname and...