kodbox Cross-Site Scripting Vulnerability

kodbox is a web file manager. A security vulnerability exists in kodbox version 1.44, which stems from a custom global HTML that causes XSS...

CVE-2023-45998

CVE-2023-45998 affects kodbox 1.44 and describes a Cross Site Scripting (XSS) vulnerability triggered by customizing global HTML, resulting in stored XSS. Affected component/entry point is the global HTML customization path; underlying issue is XSS propagation via stored payloads. Documented impa...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, atlantis-fips, k3d, prometheus-operator, atlantis, metrics-server-fips, tkn, kube-fluentd-operator, gke-gcloud-auth-plugin, cosign, prometheus-postgres-exporter-fips, dynamic-localpv-provisioner, pulumi-language-java,...

Amazon Linux AMI : golang (ALAS-2023-1760)

The version of golang installed on the remote host is prior to 1.18.6-1.44. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1760 advisory. html/template: improper sanitization of CSS values Angle brackets were not considered dangerous characters when inserted...

GHSA-RF92-3VJR-W628 Improper Authentication in Jenkins Active Directory Plugin

Jenkins Active Directory Plugin implements two separate modes: Integration with ADSI on Windows, and an OS agnostic LDAP-based mode. The LDAP-based mode in Active Directory Plugin starting in version 1.44 and prior to versions 2.16.1 and 2.20 shares code between user lookup and user authenticatio...

PART I: Retrospective 2020: DDoS Was Back -- Bigger and Badder Than Ever Before

Never before has the risk of a distributed denial-of-service DDoS attack been higher. In 2020, we saw record-breaking attacks, a DDoS extortion campaign impacting thousands of organizations globally, more emergency customer turnups, and more Akamai customers attacked than any year on record -- an...

PT-2020-15529 · Jenkins · Jenkins Active Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Active Directory Plugin versions 1.44 through 2.19 Jenkins Active Directory Plugin versions prior to 2.16.1 and 2.20 Description: The issue allows attackers to log in as any user if a magic constant is used as the password. This is du...

CVE-2017-18487

The adsense-plugin aka Google AdSense plugin before 1.44 for WordPress has multiple XSS issues...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A cross-site scripting vulnerability exists in several files in LibreNMS versions prior to 1.44. A remote attack...

Silicon Graphics LibTiff Heap Buffer Overflow Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A heap buffer overflow vulnerability exists in the libtiff/tifpixarlog.c file in...

CVE-2012-5891

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...

CVE-2012-5891

DAlbum 1.44 build 174 and earlier is affected by multiple CSRF vulnerabilities in photo/pass.php that allow remote attackers to hijack administrator authentication for actions (1) add a user, (2) change user passwords, or (3) delete a user. The vulnerability is in CSRF protection for these admin ...

CVE-2008-5568

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki 1 jcode.pl and 2 Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress WP Table Plugin <= 1.43 - Remote File Inclusion

Because of this vulnerability, the attackers can execute arbitrary PHP code via a URL in the "wpPATH" parameter. Solution Update the WordPress WP Table plugin to the latest available version at least 1.44...