12398 matches found
org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.1) +50 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (1.0-final)
org.keycloak:keycloak-core MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...
org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.beta2) +49 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (1.0-beta-4)
org.keycloak:keycloak-core MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...
abbot:costello (1.4.0), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.4) +3854 more potentially affected by CVE-2015-3253 via org.codehaus.groovy:groovy-all (>=1.7.0, <=2.4.3)
org.codehaus.groovy:groovy-all MAVEN version =1.7.0, =0.0.1, =0.0.20, =0.2.dev, =0.2.dev, =2.1.10, =2.0.0, =2.0.0, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.2.10 and more Source cves: CVE-2015-3253 Source advisory: GHSA-QG25-HGJV-CG9Q...
abbot:costello (1.4.0), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.4) +3854 more potentially affected by CVE-2015-3253 via org.codehaus.groovy:groovy-all (>=1.7.0, <=2.4.3)
org.codehaus.groovy:groovy-all MAVEN version =1.7.0, =0.0.1, =0.0.20, =0.2.dev, =0.2.dev, =2.1.10, =2.0.0, =2.0.0, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.1.9, =2.2.10 and more Source cves: CVE-2015-3253 Source advisory: OSV:GHSA-QG25-HGJV-CG9Q...
abbot:costello (1.4.0), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6) +4959 more potentially affected by CVE-2016-6814 via org.codehaus.groovy:groovy-all (>=1.7.0, <=2.4.7)
org.codehaus.groovy:groovy-all MAVEN version =1.7.0, =0.0.1, =1.0.0, =0.0.20, =0.2.dev, =0.2.dev, =2.1.10, =2.2.11, =2.2.11, =2.0.0, =2.0.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =3.5.0-rc.1 and more Source cves: CVE-2016-6814 Source advisory: GHSA-XPHJ-M9CC-8FMQ...
abbot:costello (1.4.0), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6) +4959 more potentially affected by CVE-2016-6814 via org.codehaus.groovy:groovy-all (>=1.7.0, <=2.4.7)
org.codehaus.groovy:groovy-all MAVEN version =1.7.0, =0.0.1, =1.0.0, =0.0.20, =0.2.dev, =0.2.dev, =2.1.10, =2.2.11, =2.2.11, =2.0.0, =2.0.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =3.5.0-rc.1 and more Source cves: CVE-2016-6814 Source advisory: OSV:GHSA-XPHJ-M9CC-8FMQ...
customhistory:customhistory (>=1.1, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.471) +6 more potentially affected by CVE-2018-1000195 via org.jenkins-ci.main:jenkins-core (1.471)
org.jenkins-ci.main:jenkins-core MAVEN version 1.471 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - customhistory:customhistory =1.1, =1.3 - org.jenkins-ci.main:jenkins-test-harness 1.471 -...
WordPress All-in-One WP Migration Plugin <= 7.58 Arbitrary File Deletion Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Powershell Exec, Windows Upload/Execute, Reverse All-Port TCP Stager
Execute an x86 payload from a command via PowerShell. Uploads an executable and runs it staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options msf use payload/cmd/windows/powershell/upexec/reversetcpallports msf payloadreversetcpallports show actions...
CVE-2022-0027
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...
CVE-2022-1476
The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...
Arbitrary file deletion
The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...
CVE-2022-1476
All-in-One WP Migration plugin for WordPress (up to version 7.58) is affected by a directory traversal vulnerability in lib/model/class-ai1wm-backups.php that allows arbitrary file deletion. The issue arises from insufficient file validation and can be exploited by administrative users or users w...
WordPress plugin All-in-One WP Migration 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress All-in-One WP Migration 7.58 and prior versions have a path traversal vulnerability that ca...
CVE-2022-1476: Improper Limitation of a Pathname to a Restricted Directory
The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...
eurotherm-sales.com Cross Site Scripting vulnerability OBB-2613414
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
多款Hewlett Packard Enterprise安全漏洞
Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays are products of Hewlett Packard Enterprise.Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays is an adaptive flash array storage product.Hewlett Packard Enterprise Nimble Storage All Flash Arrays is an all-flash array storag...
PT-2022-16215 · Hewlett Packard · Hpe Nimble Storage All Flash Arrays +2
Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage All Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Secondary Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Hybrid Flash Arrays...
CVE-2022-23705: Undefined Security Weakness
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the...
