CVE-2023-40711

The CVE-2023-40711 issue affects Veilid prior to 0.1.9, where the uncompressed data size is not validated during decompression of an envelope receipt. This can cause a denial of service (out-of-memory abort) via crafted packet data; exploitation has been observed in the wild (Aug 2023). Affected ...

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

CVE-2022-40711

creationtimestamp| type| source ---|---|--- 2023-01-01 12:15:28+00:00| seen| https://t.me/cibsecurity/55711...

CVE-2022-40711

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...

CVE-2022-40711

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...

CVE-2022-40711

PrimeKey EJBCA 7.9.0.2 Community is affected by CVE-2022-40711, a stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload targeting higher-privilege users. Public remediations/patch version not specified in the provided sources. Exploitation details a...

CVE-2021-40711

Adobe Experience Manager (AEM) 6.5.9.0 and earlier are affected by a stored XSS in Content Fragments creation. An authenticated attacker can send a malformed POST to cause arbitrary code execution, with malicious JavaScript potentially running in victims’ browsers. Publicly documented remediation...