9 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-41563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO...
CVE-2023-41563
Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...
CVE-2023-41563
creationtimestamp| type| source ---|---|--- 2023-08-30 16:12:28+00:00| seen| https://t.me/cibsecurity/69428...
CVE-2023-41563
CVE-2023-41563 affects Tenda AC9 (V3.0 V15.03.06.42_multi) and Tenda AC5 (US_AC5V1.0RTL_V15.03.06.28). The root cause is a stack overflow in the GetParentControlInfo API when processing the mac parameter via /goform/GetParentControlInfo. Documents indicate this can lead to remote code execution o...
CVE-2022-41563
The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure,...
CVE-2022-41563
The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure,...
CVE-2021-41563
creationtimestamp| type| source ---|---|--- 2021-10-08 20:40:33+00:00| seen| https://t.me/cibsecurity/30264...
CVE-2021-41563
Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks...
CVE-2021-41563
CVE-2021-41563 affects Tad Book3 (an XOOPS module) where the editing book function fails to filter special characters, enabling unauthenticated attackers to inject JavaScript and perform stored XSS. The vulnerability is caused by insufficient input validation on client-side data, allowing scripts...