291 matches found
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection
Impact Keylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents a...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
Security Bulletin: Google OAuth Client Library for Java as used by IBM QRadar SIEM is vulnerable to verification bypass (CVE-2021-22573)
Summary Google OAuth Client Library for Java as used by IBM QRadar SIEM is vulnerable to verification bypass. IBM QRadar SIEM has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2021-22573 DESCRIPTION: Google OAuth Client Library for Java could allow a remote attacker to...
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
OpenProject 代码问题漏洞
OpenProject is an open source Web-based project management software . The software features project planning, task management, bug tracking and cost budgeting. A code issue vulnerability exists in OpenProject versions 7.4.0 through 12.5.4 that stems from an existing login session for a user accou...
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
Cross site scripting
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
squidex 跨站脚本漏洞
squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-19506 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the squid.svg file. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading...
SUSE CVE-2019-11050
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure o...
SUSE CVE-2021-27017
Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release...
CVE-2023-0642
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
Input validation
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...