Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:58 a.m.15 views

Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.9AI score0.00254EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/17 4:58 a.m.8 views

GHSA-H7JC-PG2R-MQJ4 Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.7CVSS5.5AI score0.00254EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/04/17 12:0 a.m.38 views

Debian DLA-2983-1 : abcm2ps - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2983 advisory. - Stack-based buffer overflow in the delayedoutput function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service application...

9.8CVSS7.1AI score0.03042EPSS
Exploits5References15
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.28 views

Debian DLA-2877-1 : gdal - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2877 advisory. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 - GDAL 3.3.0 through...

9.8CVSS6.9AI score0.02245EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2021/11/29 12:0 a.m.37 views

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...

6.4CVSS6.8AI score0.00113EPSS
Exploits0References16
Rows per page
Query Builder