Lucene search
+L

905 matches found

Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.9 views

PT-2023-1001 · Arm · Arm Nn Android-Nn-Driver

Name of the Vulnerable Software and Affected Versions: Arm NN Android-NN-Driver versions prior to 23.02 Description: A possible out-of-bounds read and write was discovered due to an improper length check of shared memory. This issue could lead to local escalation of privilege with no additional...

7.8CVSS7.7AI score0.00298EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/28 10:17 a.m.37 views

Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability in Apache Commons FileUpload (CVE-2023-24998)

Summary IBM Workload Scheduler is potentially affected by a vulnerability found in Apache Commons FileUpload that can cause a DoS attack. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the...

7.5CVSS7.6AI score0.46836EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2023/04/26 8:15 p.m.9 views

CVE-2023-28009

HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.1CVSS7.3AI score0.00757EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/26 8:15 p.m.31 views

CVE-2023-28009

HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.1CVSS7AI score0.00757EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/26 8:15 p.m.4 views

CVE-2023-28008

HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.1CVSS7.3AI score0.00821EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/26 8:15 p.m.16 views

Xxe

HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS8.1AI score0.00821EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/26 8:15 p.m.19 views

Xxe

HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS8.1AI score0.00757EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/26 7:38 p.m.14 views

CVE-2023-28009 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection

HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

6.5CVSS8.1AI score0.00757EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/26 7:38 p.m.34 views

CVE-2023-28009 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection

HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

6.5CVSS8.3AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/26 7:38 p.m.54 views

CVE-2023-28009

CVE-2023-28009 affects HCL Workload Automation. The vulnerability is an XML External Entity (XXE) injection in the XML processing path. Impact stated in sources: potential exposure of sensitive information and/or memory/resource exhaustion. Exploitation details are not provided in the documents; ...

8.1CVSS7.2AI score0.00757EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/26 7:24 p.m.8 views

CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection

HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

7.1CVSS8.1AI score0.00821EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/26 7:24 p.m.52 views

CVE-2023-28008

CVE-2023-28008 affects HCL Workload Automation versions 9.4, 9.5, and 10.1 where XML data is processed. The root cause is XML External Entity (XXE) injection in the XML processing path, enabling a remote attacker to access sensitive information or exhaust memory resources as described across mult...

8.1CVSS7.5AI score0.00821EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/26 7:24 p.m.34 views

CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection

HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

7.1CVSS8.3AI score0.00821EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/26 12:0 a.m.8 views

HCL Technologies Workload Automation 代码问题漏洞

HCL Technologies Workload Automation is a workload automation software from HCL Technologies India. It refers to the use of software to schedule, manage and execute various business tasks and processes with minimal human intervention. A security vulnerability exists in HCL Technologies Workload...

8.1CVSS7.7AI score0.00821EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/26 12:0 a.m.8 views

HCL Technologies Workload Automation 代码问题漏洞

HCL Technologies Workload Automation is a workload automation software from HCL Technologies India. It refers to the use of software to schedule, manage and execute various business tasks and processes with minimal human intervention. HCL Technologies Workload Automation suffers from a security...

8.1CVSS7.7AI score0.00757EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/04/26 12:0 a.m.14 views

PT-2023-21476 · Hcl · Hcl Workload Automation

Name of the Vulnerable Software and Affected Versions: HCL Workload Automation affected versions not specified Description: HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this issue to expose sensitive...

8.1CVSS8.1AI score0.00757EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/04/26 12:0 a.m.7 views

PT-2023-21475 · Hcl · Hcl Workload Automation

Name of the Vulnerable Software and Affected Versions: HCL Workload Automation versions 9.4 through 10.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memor...

8.1CVSS8AI score0.00821EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/04/19 12:0 a.m.58 views

Oracle Database Server (Apr 2023 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficul...

9.8CVSS7.4AI score0.99569EPSS
SaveExploits13References10
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/17 11:58 a.m.33 views

Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability found in Json-smart library (CVE-2023-1370)

Summary IBM Workload Scheduler is potentially affected by a vulnerability found in Json-smart library that can cause a stack exhaustion stack overflow and software crash. Specifically, the following plugins can suffer from this issue: Azure Storage Job Executor, Azure Resource Manager Job Executo...

7.5CVSS7.5AI score0.01119EPSS
SaveExploits1Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
added 2023/03/23 12:0 a.m.16 views

4 Tips for Better AWS Cloud Workload Security

Discover the challenges of AWS cloud workload security and the various technologies that can alleviate them...

6.8AI score
SaveExploits0
Rows per page
Query Builder