CVE-2022-35847

An improper neutralization of special elements used in a template engine vulnerability CWE-1336 in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload...

Input validation

An improper neutralization of special elements used in a template engine vulnerability CWE-1336 in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload...

CVE-2022-35847

An improper neutralization of special elements used in a template engine vulnerability CWE-1336 in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload...

CVE-2022-35847

The CVE-2022-35847 issue affects FortiSOAR management interface across multiple releases: 6.4.0–6.4.4, 7.0.0–7.0.3, and 7.2.0. It stems from improper neutralization of special elements used in a template engine (CWE-1336). A remote, authenticated attacker could craft a payload to execute arbitrar...

FortiSOAR - Server-Side Template Injection in Playbook component

An improper neutralization of special elements used in a template engine vulnerability CWE-1336 in FortiSOAR management interface may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload...

CVE-2022-1336

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336 Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336

CVE-2022-1336 affects the Carousel CK WordPress plugin (versions ≤ 1.1.0). The issue is due to unsanitized/uncleaned Slide descriptions, allowing stored Cross-Site Scripting (XSS) when unfiltered_html is disallowed. Exploitation requires authenticated access (high-privilege users such as admin) a...

iTop Remote Command Execution Exploit

!/usr/bin/env ruby Exploit Title: iTop p...

USN-5334-1: man-db vulnerability | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An attacker could possibly use this issue to escalate...

RHEL 7 / 8 : OpenShift Container Platform 4.7.49 (RHSA-2022:1336)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1336 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

Ubuntu 16.04 ESM : man-db vulnerability (USN-5334-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5334-1 advisory. It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An attacke...

SUSE: Security Advisory (SUSE-SU-2012:1336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3011-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4791-1: Apache Tomcat 7 vulnerabilities

It was discovered that Apache Tomcat 7 did not protect applications from the presence of untrusted client data in an environment variable. A remote attacker could possible use this vulnerability to redirect the traffic to an arbitrary proxy and obtain sensitive information. CVE-2016-5388 It was...

CVE-2021-1336

creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:31+00:00| seen| https://t.me/cibsecurity/23081...

CVE-2021-1336

The CVE-2021-1336 family affectsCisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers. The root cause is improper validation in the web-based management interface, enabling an authenticated remote attacker with administrator credentials to execute arbitrary code as root or ca...

Security Bulletin: IBM BigInsights is affected by a Text Analytics vulnerabilty (CVE-2017-1336 )

Summary IBM BigInsights is affected by a Text Analytics vulnerabilty CVE-2017-1336 Vulnerability Details CVEID: CVE-2017-1336 DESCRIPTION: IBM Infosphere BigInsights could allow an attacker to inject code that could allow access to restricted data and files. CVSS Base Score: 4.4 CVSS Temporal...