8 matches found
CVE-2021-41792
An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to...
CVE-2024-41792
creationtimestamp| type| source ---|---|--- 2025-04-08 08:46:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10884 2025-04-08 11:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114302183018844167 2025-04-08 12:07:14+00:00| seen|...
CVE-2024-41792
CVE-2024-41792 affects Siemens SENTRON 7KT PAC1260 Data Manager (All versions). The vulnerability is a path traversal issue in the device’s web interface that allows an unauthenticated attacker to access arbitrary files with root privileges, due to improper input filtering in GET/POST handling. S...
CVE-2023-41792
creationtimestamp| type| source ---|---|--- 2024-01-09 16:40:06+00:00| seen| https://t.me/truesecator/5271...
CVE-2023-41792
Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41792 Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41792
Summary : CVE-2023-41792 is a CSRF issue in Pandora FMS that enables Stored XSS via the SNMP Trap Editor. Affected versions are 700–773. The connected PT/PTSecurity entries confirm this CSRF/XSS combination and list Pandora FMS as the affected product. The NVD entry mirrors the description and im...
CVE-2021-41792
CVE-2021-41792 affects Hyland Alfresco components: org.alfresco:alfresco-content-services up to 6.2.2.18 and org.alfresco:alfresco-transform-services up to 1.3. A crafted HTML file uploaded to the system could trigger an unexpected request by the transformation engine, with the response not expos...