6656 matches found
PT-2021-3221
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow and LOCMAN WorkFlow Configurator modules of the LOCMAN:PLM system. Exploitation of this issue...
PT-2021-3213
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow Auditor service of the LOCMAN:PLM system. This could allow an attacker to execute arbitrary code...
PT-2021-3214
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to a data exchange module vulnerability in the "ЛОЦМАН WorkFlow" subsystem, which allows for unlimited upload of dangerous file types between different "ЛОЦМАН WorkFlo...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is Github an open source application. Provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that allows bypassing restrictions tha...
PT-2021-3215
Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the database update module of the WorkFlow system. Exploitation of this issue can allow an attacker to execute...
IBM Engineering Workflow Management 跨站脚本漏洞
IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...
Argo Code Issues Vulnerabilities
Argo is an open source container native workflow engine. A code issue vulnerability exists in Argo CD versions prior to 1.8.4, which stems from the incorrect handling of Token in the util/session/sessionmanager.go file, resulting in the Token remaining valid after the user is unavailable. No...
Security Bulletin: Multiple CVEs - Vulnerabilities in IBM Java Runtime affect IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager
Summary Vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries compone...
Apache Airflow Access Control Error Vulnerability
Apache Airflow is an Apache project maintained by the open source community dedicated to scheduling and monitoring workflows, open sourced by Airbnb in October 2014 and graduated from the Apache Foundation in January 2019 to become the new Apache top-level project. Failure of proper access contro...
Security Bulletin: OpenSSL vulnerability affects IBM Engineering Workflow Management
Summary OpenSSL has a security vulnerability that allows a remote attacker to exploit the application. OpenSSL is used by Rational BuildForge Agent shipped with IBM Engineering Workflow Management. Rational BuildForge has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-1551...
CVE-2021-23338
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...
PYSEC-2021-86
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...
PYSEC-2021-86
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...
CVE-2021-23338
CVE-2021-23338 affects all versions of the qlib package. The CLI workflow function uses an unsafe YAML load, enabling Deserialization of Untrusted Data. There is no explicit exploitation detail provided in the initial documents. Several connected advisories corroborate a Deserialization of Untrus...
CVE-2021-23338: Deserialization of Untrusted Data
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...
Qlib Security Vulnerabilities
A security vulnerability exists in all versions of qlib that stems from the use of insecure YAML load functions for workflow functions...
PT-2021-15442
Name of the Vulnerable Software and Affected Versions qlib affected versions not specified Description The issue affects the workflow function in the cli part of qlib, which was using an unsafe YAML load function. Recommendations At the moment, there is no information about a newer version that...
CVE-2020-4768
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2020-4768
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
Cross site scripting
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...