9 matches found
Axis1.4-CVE-2019-0227
Axis1.4 CVE-2019-0227 リモートコマンド実行脆弱性利用ツール 📖 脆弱性の説明 Apache Axis1.4 には、リモートコマンド実行脆弱性 CVE-2019-0227 が存在します。enableRemoteAdmin プロパティが true に設定されている場合、攻撃者は AdminService インターフェースを介して悪意のあるサービスをデプロイし、ターゲットサーバー上で任意のシステムコマンドを実行できます。 影響を受けるバージョン : Apache Axis ≤ 1.4 トリガー条件 : enableRemoteAdmin が true に設定されていること...
CVE-2026-72872
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.saveBitbucketProvider stores bitbucketOwner and bitbucketRepository without validation and cloneBitbucketRepository in packages/server/src/utils/providers/bitbucket.ts interpolates those values into git clo...
CVE-2026-72872
CVE-2026-72872 affects Dokploy PaaS prior to version 0.29.13. Affected component: packages/server/src/utils/providers/bitbucket.ts, where bitbucketOwner and bitbucketRepository are stored/used without validation and interpolated into git clone commands executed via execAsync/execAsyncRemote. This...
CVE-2026-72872
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.saveBitbucketProvider stores bitbucketOwner and bitbucketRepository without validation and cloneBitbucketRepository in packages/server/src/utils/providers/bitbucket.ts interpolates those values into git clo...
EUVD-2025-208329
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
CVE-2025-34224
Vasion Print (formerly PrinterLogic) Virtual Appliance Host (VA) and Application (VA/SaaS deployments) are affected. Prior to versions 22.0.1049 (Host) and 20.0.2786 (Application) expose PHP scripts under the console_release directory without authentication. An unauthenticated attacker can invoke...
CVE-2025-34204 Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances
Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...
Information Disclosure
puppet-swift is vulnerable to information-disclosure. The vulnerability is possible as it has a flaw in the service deployment and leaves the proxy-server.conf file with world-readable permissions...
