27 matches found
CVE-2022-21359
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Optimization Framework. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...
CVE-2020-21359
creationtimestamp| type| source ---|---|--- 2021-08-12 00:39:10+00:00| seen| https://t.me/cibsecurity/27205...
CVE-2020-21359
CVE-2020-21359 affects Maccms10. An arbitrary file upload vulnerability exists in the Template Upload function, where an attacker can bypass the suffix whitelist verification by adding a character to the end of the uploaded file name, enabling arbitrary code execution. Connected sources corrobora...
TYPO3 DoS Vulnerability (TYPO3-CORE-SA-2021-005)
TYPO3 is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; if...
CVE-2021-21359
creationtimestamp| type| source ---|---|--- 2021-03-23 06:38:05+00:00| seen| https://t.me/cibsecurity/25276 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...
CVE-2021-21359 Denial of Service in Page Error Handling
TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to ...
CVE-2021-21359
TYPO3 core vulnerability CVE-2021-21359 affects TYPO3 CMS before 9.5.25, 10.4.14, and 11.1.1. When a user requests invalid or non-existing resources via HTTP, the page error handler could retrieve content to display from another page, causing the application to call itself recursively and potenti...