CVE-2022-41938

Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HTML DOM nodes when pages were rendered. The change was made after v1.5 and was not noticed. This allowed an attacker to inject malicious HTML markup using a discussion title inpu...

CVE-2024-41938

creationtimestamp| type| source ---|---|--- 2024-08-13 11:15:06+00:00| seen| https://t.me/cvedetector/2975...

CVE-2024-41938

CVE-2024-41938 – SINEC NMS path traversal in importCertificate affects SINEC NMS Control web app on all versions prior to v3.0. The vulnerability is a path traversal flaw in the importCertificate function that could allow an authenticated attacker to delete arbitrary certificate files on the driv...

com.lookout.jenkins:environment-script (=1.2.5), org.jenkins-ci.plugins:artifactory (>=2.12.0 <=2.12.1) +1 more potentially affected by CVE-2023-41938 via org.jenkins-ci.plugins:ivy (>=1.17 <=1.26)

org.jenkins-ci.plugins:ivy MAVEN version =1.17, =2.12.0, =0.6, =0.8 Source cves: CVE-2023-41938 Source advisory: OSV:GHSA-63VW-RPRV-4F8J...

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

CVE-2023-41938

CVE-2023-41938 is a CSRF flaw in the Jenkins Ivy Plugin (versions ≤ 2.5) that lets attackers delete disabled modules. The issue scope is limited to the Ivy Plugin, with an external attacker requiring user interaction, and the base CVSS v3.1 vector indicates Network access, Low attack complexity, ...

CVE-2021-41938

creationtimestamp| type| source ---|---|--- 2022-05-19 18:29:36+00:00| seen| https://t.me/cibsecurity/42980...

CVE-2021-41938

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

CVE-2021-41938

CVE-2021-41938 affects ShopXO CMS 2.2.0. The issue is an arbitrary file upload vulnerability in three locations on the management page, caused by upload functions not properly restricting file types/paths. The CVSS-based assessment indicates a high-severity impact (3.1: HIGH, network access, unli...