QVD-2024-26473

QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Suche: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Suche: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

CVE-2021-29442

creationtimestamp| type| source ---|---|--- 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-29442

...

CVE-2024-29442

CVE-2024-29442 entry is rejected/not used per initial description.

CVE-2023-29442

creationtimestamp| type| source ---|---|--- 2023-04-27 00:25:21+00:00| seen| https://t.me/cibsecurity/62947...

CVE-2022-29442

Authenticated subscriber or higher user role Stored Cross-Site Scripting XSS vulnerability in Messages For WordPress = 2.1.10 at WordPress...

CVE-2022-29442

CVE-2022-29442 : Affected product is WordPress Private Messages plugin for WordPress, version 2.1.10 and earlier. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw in Messages For WordPress, caused by insufficient sanitization/escaping of input, allowing an attacker wit...

CVE-2022-29442

Authenticated subscriber or higher user role Stored Cross-Site Scripting XSS vulnerability in Messages For WordPress = 2.1.10 at WordPress...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

CVE-2021-29442

Nacos

CVE-2021-29442 Authentication bypass

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...