CPE
Multiple Vulnerabilities in MariaDB Connector/Node.js
2 TTPs 2 CVEsMariaDB Connector/Node.js is vulnerable to multiple security flaws, including SQL injection, information disclosure, data manipulation, and denial-of-service, allowing remote unauthenticated attackers to compromise data.
Multiple Vulnerabilities in Oracle Hyperion
2 CVEsOracle Hyperion is affected by multiple security vulnerabilities (CVE-2024-21054, CVE-2024-21055) that allow remote attackers to compromise system confidentiality, integrity, and availability.
CVE-2022-22978 Authorization Bypass in Spring Security
1 rule 1 TTP 1 CVEAn authorization bypass vulnerability in Spring Security allows unauthenticated attackers to access restricted endpoints by injecting URL-encoded newline or carriage return characters into request paths protected by RegexRequestMatcher.
Multiple Vulnerabilities in VMware Tanzu Spring Security
2 CVEsMultiple vulnerabilities in VMware Tanzu Spring Security, tracked as CVE-2024-22259 and CVE-2024-22262, allow remote attackers to perform file manipulation, information disclosure, cross-site scripting (XSS), and security control bypass.
Remote Code Execution Vulnerability in zlib
1 TTP 1 CVEA memory corruption vulnerability in the zlib library allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial of service.
Multiple Vulnerabilities in Oracle Hyperion
2 CVEsOracle has disclosed a series of 25 vulnerabilities affecting Hyperion, enabling remote, anonymous, or authenticated attackers to compromise system confidentiality, integrity, and availability.
Multiple Vulnerabilities in NetApp Products
2 rules 5 CVEsMultiple vulnerabilities in NetApp products, including CVE-2023-0482, CVE-2023-20863, CVE-2024-22257, CVE-2025-23367, CVE-2025-48976, CVE-2025-53816, and CVE-2025-53817, could lead to remote denial of service, data confidentiality breaches, and data integrity breaches.
Windows Binary Execution from Archive-Related Paths
3 rules 3 TTPs 1 CVEDetects the execution of a binary from archive-related paths within a user's Temp directory, potentially indicating attempts to bypass Mark-of-the-Web (MOTW) or exploit vulnerabilities like CVE-2025-0411.