107 matches found
CVE-2023-1429 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...
CVE-2023-1429 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...
CVE-2023-1429 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...
CVE-2023-1429
CVE-2023-1429 is a reflected XSS vulnerability in Pimcore Pimcore prior to 10.5.19, affecting the Name field in the Document Types module of Settings. The issue enables cross-site scripting via the Name field; PoCs and patches are documented in the linked huntr entry and OSV/Red Hat advisories. T...
Pimcore SQL Injection (CVE-2022-1429)
An SQL injection vulnerability exists in Pimcore. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
SUSE: Security Advisory (SUSE-SU-2022:1429-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-1429
creationtimestamp| type| source ---|---|--- 2022-04-22 12:27:36+00:00| seen| https://t.me/cibsecurity/41298...
CVE-2022-1429
SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data...
CVE-2022-1429
CVE-2022-1429 affects Pimcore/pimcore prior to version 10.3.6, where the vulnerability is in GridHelperService.php and allows SQL injection that could lead to data disclosure. Connected sources consistently describe the affected component as GridHelperService.php in pimcore/pimcore and reference ...
CVE-2022-1429 SQL injection in GridHelperService.php in pimcore/pimcore
SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data...
CVE-2021-1429
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...
SUSE SLES12 Security Update : permissions (SUSE-SU-2021:1429-1)
This update for permissions fixes the following issues : Update to version 20170707 : - make btmp root:utmp bsc1050467, bsc1182899 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...
Amazon Linux AMI : python34, python35 (ALAS-2020-1429)
The version of python34 installed on the remote host is prior to 3.4.10-1.51. The version of python35 installed on the remote host is prior to 3.5.9-1.27. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1429 advisory. In Lib/tarfile.py in Python through 3.8.3...
CVE-2020-1429
CVE-2020-1429 affects Microsoft Windows Error Reporting Manager. According to CNVD-2020-52921, the vulnerability is an elevation of privilege caused by the manager failing to properly handle process crashes, which can be exploited by running a specially crafted application to delete target files ...
CentOS 6 : firefox (RHSA-2020:1429)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1429 advisory. - When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned...
RHEL 6 : firefox (RHSA-2020:1429)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1429 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Microsoft Internet Explorer jscript.dll Use After Free (CVE-2019-1429)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2019-1429)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4523205)
This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4525237)
This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...