HPESBNW05058 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Carriage Return Line Feed CRLF Injection; Remote: Denial of Service DoS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Universal SLA Management =4.6 CVSS Scores: | CVE |...

HPESBNW04997 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary File Modification; Remote: Code Execution, Disclosure of Sensitive Information, Escalation of Privilege, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Universal SLA Management...

EUVD-2020-4930

Malware in sbrugna...

EUVD-2021-21370

Malware in sbrugna...

EUVD-2020-23780

Malware in sbrugna...

EUVD-2020-24693

Malware in sbrugna...

EUVD-2013-1188

Malware in sbrugna...

EUVD-2019-10294

Malware in sbrugna...

EUVD-2024-37646

Malicious code in bioql PyPI...

EUVD-2023-46083

Malicious code in bioql PyPI...

EUVD-2024-43139

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-38859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 EOL allowed malicious users to execute...

CVE-2023-41588

A cross-site scripting XSS vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the durationFormat parameter...

CVE-2020-12629

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

DEBIAN-CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

UBUNTU-CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

PT-2024-33283 · Znuny +1 · Znuny +1

Name of the Vulnerable Software and Affected Versions: Znuny versions prior to 6.5.1 through 6.5.10 Znuny versions 7.0.1 through 7.0.16 Description: The issue allows for XSS, where JavaScript code in the short description of the SLA field in Activity Dialogues is executed. Recommendations: For...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...