59 matches found
TIBCO Software EBX 跨站脚本漏洞
TIBCO Software EBX is a suite of enterprise data management solutions from TIBCO Software, USA. A security vulnerability exists in TIBCO Software EBX versions 6.0.0 through 6.0.8. An attacker could exploit this vulnerability to conduct cross-site scripting XSS attacks on the affected system...
Moderate: Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update
An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
GHSA-2M65-M22P-9WJW Duplicate Advisory: .NET Information Disclosure Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vh55-786g-wjwj. This link is maintained to preserve external references. Original Description Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET...
Security Updates for Microsoft .NET Core (August 2022)
A spoofing vulnerability exists in .NET core 6.0 6.0.8 and .NET Core 3.1 3.1.28. An unauthenticated, remote attacker can exploit this, to perform actions with the privileges of another user. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Moderate: .NET 6.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8...
PT-2022-10567 · WordPress · Wp Maintenance
Name of the Vulnerable Software and Affected Versions: WP Maintenance plugin versions prior to 6.0.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS in the WP Maintenance plugin. This affects multiple inputs and can be exploited by authenticated administrator...
varnish:6 security update
varnish 6.0.8-1.1 - Resolves: 2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request Smuggling Vulnerability varnish-modules 0.15.0-6 - Related: 1982862 - rebuild for new varnish version...
CVE-2019-6696
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage...
CVE-2019-15033
CVE-2019-15033 affects Pydio 6.0.8. It enables an authenticated SSRF during a Remote Link Feature download where the attacker can supply an intranet URL in the file parameter to index.php (example: file=http%3A%2F%2F192.168.1.2). The connected documents confirm this vulnerability and its describe...
OTRS 6.x < 6.0.8 Privilege Escalation Vulnerability (OSA-2018-02)
OTRS is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...
CVE-2015-0845
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
Oracle Reports Server 6.0.8/9.0.x XML File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14311/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary XML files. Reportedly, the server fails to restrict users from accessing parts of arbitrary XML files when handling specially...
TYPO3 File Abstraction Code Execution Vulnerability
TYPO3 is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...
FlashChat 6.0.8 /chat/upload.php 任意文件上传漏洞
No description provided by source...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors...
Oracle Reports Server 6.0.8/9.0.x - XML File Disclosure
source: https://www.securityfocus.com/bid/14311/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary XML files. Reportedly, the server fails to restrict users from accessing parts of arbitrary XML files when handling specially crafted HTTP GET requests. All version...
2022-08 .NET 6.0.8 Security Update for x86 Client (KB5016990)
2022-08 .NET 6.0.8 Security Update for x86 Client KB5016990...