Joomla! 跨站脚本漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! versions 4.0.0 through 4.2.4 that stems from insufficient filtering of user input...

WordPress All in One SEO Pack Plugin < 4.2.4 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aioseo:allinoneseo"; if description...

WordPress WP Google Map Plugin <= 4.2.3 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flippercode:wpgooglemap"; ifdescription...

Design/Logic Flaw

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

Fastify-Static 输入验证错误漏洞

Fastify-Static is a plugin. It is used to serve static files as soon as possible. A security vulnerability exists in versions of the fastify-static module prior to 4.2.4, which can be exploited by an attacker to redirect a user to an arbitrary website using a double slash followed by a domain...

Adminer < 4.2.4 Remote Code Execution

The version of Adminer installed on the remote host suffers from a remote code execution flaw when crafting insufficiently sanitized SQLite queries. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

SUSE: Security Advisory (SUSE-SU-2012:1327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nagios Core Cross-Site Request Forgery Vulnerability

Nagios Core is an open source system and network monitoring application. Nagios Core 4.2.4 suffers from a cross-site request forgery vulnerability. No detailed vulnerability details are provided at this time...

Cross site request forgery (csrf)

Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery CSRF in many functions, like adding – deleting for hosts or servers...

CVE-2020-35269

Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery CSRF in many functions, like adding – deleting for hosts or servers...

Nagios 跨站请求伪造漏洞

Nagios Core is an open source system and network monitoring application. Nagios Core 4.2.4 suffers from a cross-site request forgery vulnerability. No detailed vulnerability details are provided at this time...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

CVE-2012-6721

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Forum, 2 Event, and 3 Classifieds plugins in SocialEngine before 4.2.4...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.2.4 images update

Red Hat OpenShift Container Platform release 4.2.4 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

CVE-2019-5946

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

Denial Of Service (DoS)

dhcp is vulnerable to denial of service DoS attacks. The vulnerability exists as ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed client identifier...

CirCarLife Scada Information Disclosure Vulnerability

Circontrol CirCarLife Scada is a parking lot automation system from Circontrol, Spain. A security vulnerability exists in Circontrol CirCarLife Scada version 4.2.4. A remote attacker can exploit this vulnerability by sending a direct request to the html/log or services/system/info.html URIs to...

[SECURITY] Fedora 26 Update: php-phpmyadmin-sql-parser-4.2.4-3.fc26

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

Cross site scripting

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

CVE-2017-17752

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...