Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in System.formats.asn - Denial of Service

Summary System.formats.asn is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-38095 Vulnerability Details CVEID:CVE-2024-38095 DESCRIPTION:.NET and Visual Studio Denial of Service Vulnerability CWE:CWE-20: Improper Input Validation CVSS Source: Microsoft...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Microsoft.Data.SqlClient

Summary Microsoft.Data.SqlClient is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2022-41064 Vulnerability Details CVEID:CVE-2022-41064 DESCRIPTION:.NET Framework Information Disclosure Vulnerability CVSS Source: IBM X-Force CVSS Base score: 5.8 CVSS...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in NuGet RestSharp

Summary NuGet RestSharp is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-45302 Vulnerability Details CVEID:CVE-2024-45302 DESCRIPTION: RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to RestRequest.AddHeader the header value is...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in NuGet

Summary NuGet is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2023-29337 Vulnerability Details CVEID:CVE-2023-29337 DESCRIPTION: NuGet Client Remote Code Execution Vulnerability CWE:CWE-367: Time-of-check Time-of-use TOCTOU Race Condition CVSS Source: IBM X-Force...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in jsonwebtokens

Summary jsonwebtokens is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-21319 Vulnerability Details CVEID:CVE-2024-21319 DESCRIPTION: Microsoft Identity Denial of service vulnerability CWE:CWE-20: Improper Input Validation CVSS Source: IBM X-Force CVSS Base scor...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in microsoft.extensions.caching.memory

Summary microsoft.extensions.caching.memory is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-43483 Vulnerability Details CVEID:CVE-2024-43483 DESCRIPTION:.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CWE:CWE-407: Inefficient Algorithmi...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Microsoft.Data.SqlClient

Summary Microsoft.Data.SqlClient is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-0056 Vulnerability Details CVEID:CVE-2024-0056 DESCRIPTION: Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability CWE:CWE-319:...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in jwtbearer authentication

Summary jwtbearer authentication is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2021-34532 Vulnerability Details CVEID:CVE-2021-34532 DESCRIPTION: ASP.NET Core and Visual Studio Information Disclosure Vulnerability CVSS Source: IBM X-Force CVSS Base score: 5.5 CVS...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in MessagePack

Summary MessagePack is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-48924 Vulnerability Details CVEID:CVE-2024-48924 DESCRIPTION: Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in LiteDB

Summary LiteDB is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2022-23535 Vulnerability Details CVEID:CVE-2022-23535 DESCRIPTION: LiteDB is a small, fast and lightweight .NET NoSQL embedded database. Versions prior to 5.0.13 are subject to Deserialization of...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Commons-io

Summary Commons-io is used by Worksoft Connective Automation Platform for IBM as part of Java jar file CVE-2021-29425 Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Duende IdentityServer

Summary Duende IdentityServer is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-39694 Vulnerability Details CVEID:CVE-2024-39694 DESCRIPTION: Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to...

EUVD-2022-6891

Malicious code in bioql PyPI...

EUVD-2022-6823

Malicious code in bioql PyPI...

CVE-2022-41246

A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CSRF vulnerability and mM

Worksoft Execution Manager Plugin 10.0.3.503 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho...

CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials

Worksoft Execution Manager Plugin 10.0.3.503 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho...

GHSA-GHQ7-85HP-FH76 CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials

Worksoft Execution Manager Plugin 10.0.3.503 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho...

GHSA-P5HR-RF6W-3VVH CSRF vulnerability and mM

Worksoft Execution Manager Plugin 10.0.3.503 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho...

CVE-2022-41245

A cross-site request forgery CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...