637 matches found
CVE-2019-14431
In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256 bytes and possible Remote Code Execution in parseSSLHandshake in sslDecode.c. During processing of a crafted packet, the server mishandles the...
CVE-2019-13470
MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling...
Sql injection
Subrion CMS 4.2.1 allows core/en/contacts/ XSS via the name, email, or phone parameter...
CVE-2019-11406
Subrion CMS 4.2.1 allows core/en/contacts/ XSS via the name, email, or phone parameter...
CVE-2019-11406
CVE-2019-11406 affects Subrion CMS 4.2.1. The vulnerability is a Cross‑Site Scripting (XSS) in the _core/en/contacts/ path, exploitable via the name, email, or phone parameter in the contacts page. According to the records, exploitation requires user interaction (UI: REQUIRED) per CVSS3; base sco...
IBM InfoSphere Streams Information Disclosure Vulnerability
IBM Streams is a suite of real-time data analytics solutions from IBM in the United States. The product extracts, filters, analyzes and correlates large streams of continuous data and provides data analytics. A security vulnerability exists in IBM InfoSphere Streams version 4.2.1 that stems from...
CVE-2017-1713
IBM InfoSphere Streams 4.2.1 is affected by CVE-2017-1713 due to use of weaker-than-expected cryptographic algorithms/weak ciphers when TLS is enabled. This could allow an attacker to decrypt highly sensitive information. The IBM bulletin for this CVE specifies affected product/version: IBM Strea...
com.alilitech:boot-plus-generator (>=1.1.0 <=1.3.7), com.alilitech:boot-plus-log (>=1.2.0 <=2.0.5) +48 more potentially affected by CVE-2019-8331 via org.webjars:bootstrap (>=4.0.0 <=4.2.1)
org.webjars:bootstrap MAVEN version =4.0.0, =1.1.0, =1.2.0, =1.1.0, =1.16.0, =3.2.2, =1.0.3.RELEASE, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =2.0.0, =2.3.0 and more Source cves: CVE-2019-8331 Source advisory: OSV:GHSA-9V3M-8FP8-MJ99...
CVE-2018-0693
Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbitrary file in the specific directory in FileZen via unspecified vectors...
CVE-2018-14657
Keycloak 4.2.1.Final and 4.3.0.Final are affected by CVE-2018-14657. The root cause is an improper implementation of brute force detection when TOPT is enabled, resulting in the login protection not being enforced. Impact described across connected sources indicates brute force protection may not...
keycloak: brute force protection not working for the entire login workflow
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures...
PT-2018-12647 · Red Hat · Keycloak
Name of the Vulnerable Software and Affected Versions: Keycloak versions 4.2.1.Final, 4.3.0.Final Description: A flaw was found in the implementation of the Brute Force detection algorithm when TOPT is enabled, which will not enforce its protection measures. Recommendations: For Keycloak version...
Pydio Remote Code Execution Vulnerability (CNVD-2018-21606)
Pydio formerly known as AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A security vulnerability exists in Pydio versions 4.2.1 through 8.2.1. A remote attacker can exploit the vulnerability to...
CVE-2018-15563
The CVE-2018-15563 entry concerns Subrion CMS 4.2.1 with a Stored XSS vulnerability in the _core/admin/pages/add/ path, exploitable via the titles[en] parameter. The root cause is improper handling/sanitization of user-supplied input in the page title field, allowing injection of JavaScript that ...
CVE-2018-16327
There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration...
Cross site scripting
There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration...
CVE-2018-16327
There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration...
CVE-2018-16327
There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration...
CVE-2018-16327
CVE-2018-16327 concerns a stored XSS vulnerability in Subrion CMS 4.2.1 via the admin panel URL configuration . The description across sources confirms the flaw as stored XSS, but the documents do not provide exploitation steps, affected environments beyond the version, root-cause analysis, or an...