QVD-2024-26473

QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Search: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Search: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

CVE-2021-29442

creationtimestamp| type| source ---|---|--- 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-29442

...

CVE-2024-29442

CVE-2024-29442 entry is rejected/not used per initial description.

CVE-2023-29442

creationtimestamp| type| source ---|---|--- 2023-04-27 00:25:21+00:00| seen| https://t.me/cibsecurity/62947...

CVE-2022-29442

Authenticated subscriber or higher user role Stored Cross-Site Scripting XSS vulnerability in Messages For WordPress = 2.1.10 at WordPress...

CVE-2022-29442

CVE-2022-29442 : Affected product is WordPress Private Messages plugin for WordPress, version 2.1.10 and earlier. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw in Messages For WordPress, caused by insufficient sanitization/escaping of input, allowing an attacker wit...

CVE-2022-29442

Authenticated subscriber or higher user role Stored Cross-Site Scripting XSS vulnerability in Messages For WordPress = 2.1.10 at WordPress...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.8.0) +436 more potentially affected by CVE-2021-29442 via com.alibaba.nacos:nacos-common (>=0.1.0, <=1.4.0)

com.alibaba.nacos:nacos-common MAVEN version =0.1.0, =0.3.0, =0.5.0, =1.0.0, =1.1, =1.1, =0.0.2.alpha, =0.0.2.alpha, =1.0.8, =1.4.0, =2021.6.0 - cn.iisme.cloud:iisme-demos-nacos-core 1.0.1 - cn.iisme.cloud:iisme-demos-nacos-web 1.0.1 - cn.iisme.cloud:iisme-gateway-nacos 1.0.1 -...

CVE-2021-29442 Authentication bypass

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

CVE-2021-29442

Nacos

com.alibaba.nacos:nacos-client (0.8.2), com.github.hengboy:micro-job-autoconfigure (0.0.3.release) +10 more potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (0.8.2)

com.alibaba.nacos:nacos-common MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.8.2 - com.github.hengboy:micro-job-autoconfigure 0.0.3.release -...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.8.0) +387 more potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (>=1.0.0-rc1, <=1.4.0)

com.alibaba.nacos:nacos-common MAVEN version =1.0.0-rc1, =0.3.0, =0.5.0, =1.0.0, =1.1, =1.1, =0.0.2.alpha, =0.0.2.alpha, =1.0.8, =1.4.0, =0.1.3, =0.1.21 - cn.lampup.decoration.example-springmvc:decoration-example-springmvc3 0.1.1 and more Source cves: CVE-2021-29441, CVE-2021-29442 Source advisor...

com.alibaba.nacos:nacos-client (0.9.0), org.nutz:nutzboot-starter-nacos-config-client (>=2.3.1.v20190318, <=2.3.7.v20190731) potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (0.9.0)

com.alibaba.nacos:nacos-common MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.9.0 - org.nutz:nutzboot-starter-nacos-config-client...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +4 more potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (0.2.1-rc1)

com.alibaba.nacos:nacos-common MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...