1091 matches found
Security Bulletin: Vulnerability found in commons-net-1.4.1.jar which is shipped with IBM® Intelligent Operations Center(CVE-2021-37533)
Summary Vulnerability have been identified in commons-net-1.4.1.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...
Security Bulletin: Addressing the Security vulnerability CVE-2021-37533 found in commons-net-1.4.1.jar
Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following commons-net-1.4.1.jar vulnerability and updated commons-net-1.4.1.jar to version 3.9.0 Vulnerability Details CVEID:CVE-2021-37533 DESCRIPTION: Apache Commons Net could allow ...
CVE-2023-23826
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Arsham Mirshah Add Posts to Pages plugin = 1.4.1 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Arsham Mirshah Add Posts to Pages plugin = 1.4.1 versions...
WordPress Better Search Replace Plugin < 1.4.1 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:deliciousbrains:bettersearchreplace"; if description...
Denial of service
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...
UBUNTU-CVE-2023-3300
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...
HashiCorp Nomad 安全漏洞
HashiCorp Nomad is a simple and flexible scheduler and orchestrator from HashiCorp USA. for managing containerized and non-containerized applications at scale, both locally and in the cloud. A security vulnerability exists in HashiCorp Nomad and Nomad Enterpris that stems from an HTTP search API...
CVE-2023-27845
SQL injection vulnerability found in PrestaShop lekerawenocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components...
PT-2023-21370 · Unknown · Prestashop Lekerawen Ocs
Name of the Vulnerable Software and Affected Versions: PrestaShop lekerawen ocs versions prior to 1.4.1 Description: A SQL injection issue allows a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo and KerawenHelper::resetCheckoutSessionData components. Recommendation...
Input validation
Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...
CVE-2023-34611
An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
mJson 缓冲区错误漏洞
mJson is an extremely lightweight Java JSON library from Borislav Iordanov's personal developer. A security vulnerability exists in mJson 1.4.1 and earlier versions that allows an attacker to cause a denial of service by using objects with circular dependencies...
PT-2023-24948 · Mjson · Mjson
Name of the Vulnerable Software and Affected Versions: mjson versions 1.4.1 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For mjson versions 1.4.1 and earlier, at th...
ManageEngine ServiceDesk Plus < 14.0 Build 14004 RCE
A remote code execution vulnerability exists in ManageEngine ServiceDesk Plus prior to 14.0 Build 14004 due to use of Apache xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and...
PT-2023-10292 · WordPress · Woosidebars Plugin
Name of the Vulnerable Software and Affected Versions: WooSidebars Plugin versions up to 1.4.1 Description: A problematic issue has been found in the WooSidebars Plugin on WordPress, affecting the function enable custom post sidebars of the file classes/class-woo-sidebars.php. The manipulation of...
WordPress Plugin WooSidebars 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
WordPress plugin Educare – Students & Result Management System 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-20396 · WordPress · Fixbd Educare
Name of the Vulnerable Software and Affected Versions: FixBD Educare plugin versions = 1.4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...