8837 matches found
CVE-2024-41943 I, Librarian Stored XSS vulnerability in Item Summary
I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains malicious code or script. This code will...
CVE-2024-41943 I, Librarian Stored XSS vulnerability in Item Summary
I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains malicious code or script. This code will...
i-librarian 跨站脚本漏洞
i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A cross-site scripting vulnerability exists in i-librarian versions prior to 5.11.1, which stems from PDF notes being displayed without any form of validation o...
CVE-2024-28806
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path...
CVE-2024-28806
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path...
CVE-2024-28804
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...
CVE-2024-28804
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...
CVE-2024-28805
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...
CVE-2024-28805
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...
UBUNTU-CVE-2024-42077
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2dioendiowrite estimates number of necessary transaction credits using ocfs2calcextendcredits. This however does not take into account that the IO cou...
DEBIAN-CVE-2024-41067
In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: handle RST lookup error correctly BUG When running btrfs/060 with forced RST feature, it would crash the following ASSERT inside scrubreadendio: ASSERTsectornr nrsectors; Before that, we would have tree dump from...
CVE-2024-28806
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path...
CVE-2024-28804
CVE-2024-28804: Italtel i-MCS NFV 12.1.0-20211215 is affected by a stored XSS via POST in the web interface. The vulnerability arises in POST handling, enabling script execution in affected user sessions (impact: L confidentiality, I, A). CVSS v3.1 base score 7.1 (Network attack, low complexity, ...
Italtel i-MCS NFV 安全漏洞
Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which stems from the presence of incorrect access control...
CVE-2024-28804
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...
Italtel i-MCS NFV 安全漏洞
Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which originates from a remote, unauthenticated attacker being able to upload a file at an arbitrary path...
PT-2024-22578 · Italtel · Italtel I-Mcs Nfv
Name of the Vulnerable Software and Affected Versions: Italtel i-MCS NFV version 12.1.0-20211215 Description: An issue allows remote unauthenticated attackers to upload files at an arbitrary path. Recommendations: For Italtel i-MCS NFV version 12.1.0-20211215, consider restricting file upload...
CVE-2024-28806
CVE-2024-28806 affects Italtel i-MCS NFV 12.1.0-20211215. The issue allows remote unauthenticated attackers to upload files at an arbitrary path, with a high integrity impact and no confidentiality or availability impact per CVSS. No explicit fix version is provided in the documents; some sources...