68544 matches found
SUSE: Security Advisory (SUSE-SU-2023:2907-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross site scripting
A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-3789
CVE-2023-3789 affects PaulPrinting CMS 2018, specifically the Search component in the unknown function of /account/delivery. The vulnerability arises from manipulating the s argument, causing cross-site scripting that can be exploited remotely. Public disclosure of exploits is noted. Remediation ...
CVE-2023-3789 PaulPrinting CMS Search delivery cross site scripting
A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-3785
A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be launched remotely. The exploit has be...
Cross site scripting
A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2023-3785
PaulPrinting CMS 2018 has a cross-site scripting (XSS) flaw exposed via manipulation of firstname/lastname/address/city/state. Affects PaulPrinting CMS 2018; vulnerability can be exploited remotely and exploit details have circulated. Root cause is unclear in the primary record; multiple connecte...
CVE-2023-3785 PaulPrinting CMS cross site scripting
A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be launched remotely. The exploit has be...
PaulPrinting CMS 跨站脚本漏洞
PaulPrinting CMS is a website builder system by CodePaul Individual Developers. A cross-site scripting vulnerability exists in PaulPrinting CMS version 2018, which stems from the parameter s of file/account/delivery can lead to cross-site scripting...
CVE-2023-38203
Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Recent assessments: Assessed...
PT-2023-26145 · Unknown · Paulprinting Cms
Name of the Vulnerable Software and Affected Versions: PaulPrinting CMS version 2018 Description: A vulnerability was found in the software, allowing for cross-site scripting through the manipulation of the firstname, lastname, address, city, and state arguments. The attack can be launched...
Juniper Junos OS Vulnerability (JSA10893)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10893 advisory. - Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of...
Juniper Junos OS Vulnerability (JSA10865)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10865 advisory. - Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very...
Juniper Junos OS Vulnerability (JSA10866)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10866 advisory. - The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended...
Juniper Junos OS Vulnerability (JSA10887)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10887 advisory. - An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system...
Juniper Junos OS Vulnerability (JSA10868)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10868 advisory. - A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet...
sg-ica.gslb.sg.bk.mufg.jp Open Redirect vulnerability OBB-3530293
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-M88M-CRR9-JVQQ OpenRefine vulnerable to zip slip in project import
Impact A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution if a user can be convinced to import it. Patches The vulnerability exists in all versions of OpenRefine up to and including 3.7.3. Users should update to OpenRefine 3.7.4 as soon as...
OpenRefine vulnerable to zip slip in project import
Impact A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution if a user can be convinced to import it. Patches The vulnerability exists in all versions of OpenRefine up to and including 3.7.3. Users should update to OpenRefine 3.7.4 as soon as...