3111 matches found
Argument Injection
froxlor/froxlor is vulnerable to argument injection. The vulnerability exists in the multiple functions in the library, allowing an attacker to inject and execute malicious HTML through the theme parameter...
GHSA-3V7M-2JRH-VC93 Froxlor vulnerable to Argument Injection
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
Froxlor vulnerable to Argument Injection
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
Design/Logic Flaw
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
PT-2022-28149 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864
CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...
CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-4864 Argument Injection in froxlor/froxlor
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
Mageia: Security Advisory (MGASA-2022-0471)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated xfce4-settings packages fix security vulnerability
argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package...
MGASA-2022-0471 Updated xfce4-settings packages fix security vulnerability
argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package...
Siemens SIMATIC WinCC OA Ultralight Client
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Debian: Security Advisory (DSA-5296-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Argument Injection
phpxmlrpc/phpxmlrpc is vulnerable to argument injection. The vulnerability exists in multiple functions of Client.php and Wrapper.php due to improper neutralization of argument delimiters which allows an attacker to access local file in Client:send via manipulation of the $protocol argument...