Search Results for: rce

Description CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues

Description Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in

Description Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with

Description Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the

Description LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A

Description Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795.

Description The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System. An arbitrary file upload

Description The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which

Description Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and

Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user

Description A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform

Description Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge

Description tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the “Set

Description ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated

Description Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console allows Accessing Functionality Not Properly Constrained

Description 1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some

Description In streampark, the project module integrates Maven’s compilation capabilities. The input parameter validation is not strict, allowing attackers to

Description Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values

Description IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation

Description The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including,

Description The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all

Description Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project

Description The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in