128 matches found
CVE-2024-4174
Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...
CVE-2024-4175
Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to send a malicious payload with Unicode characters that will be replaced by ASCII characters...
CVE-2024-4174 Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server
Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...
CVE-2024-4174
CVE-2024-4174 is a Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server, affecting version 2.0.15. The issue allows an attacker to execute malicious JavaScript in the client by injecting code into the URL. Documented impact is client-side code execution; no exploitation vectors or in-t...
CVE-2024-4174 Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server
Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...
Hyperion 输入验证错误漏洞
Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. An input validation error vulnerability exists in Hyperion version 2.0.15 that stems from the presence of a Unicode conversion vulnerability that could allow an attacker to send Unicode characters with a...
CVE-2024-25852
Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights...
PT-2024-21165 · Linksys · Linksys Re7000
Name of the Vulnerable Software and Affected Versions: Linksys RE7000 versions 2.0.9 through 2.0.15 Description: The issue concerns a command execution vulnerability in the AccessControlList parameter of the access control function point. This vulnerability can be exploited by an attacker to obta...
DEBIAN-CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
Malicious code in roblopython (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fff9aab2ab176cbb2e29cca29b5592fe22be3c0f020fa57bd4a931af0a40f7 The OpenSSF Package Analysis project identified 'roblopython' @ 2.0.15 pypi as malicious. It is considered malicious because: - The package...
UBUNTU-CVE-2022-37186
In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...
CVE-2022-37186
The CVE-2022-37186 issue affects LemonLDAP::NG prior to 2.0.15, where some sessions are not deleted as expected when timeoutActivity would delete them—this can occur in multi-server setups when a session is manually removed before automatic deletion. The vulnerability has an impact on integrity (...
[SECURITY] Fedora 34 Update: 389-ds-base-2.0.15-1.fc34
389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration...
CVE-2021-25061
The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page...
WordPress plugin 跨站脚本漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress WP Booking System plugin has a cross-site scripting vulnerability in versions prior to 2.0.15...
