450 matches found
The vulnerability of the `core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java` component of the Dataease database management system, which allows a hacker to disclose protected information.
The vulnerability of the core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java component of the Dataease database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to disclose sensitive information...
GHSA-RM97-X556-Q36H sanitize-html Information Exposure vulnerability
Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system including project dependencies. An attacker could exploit this vulnerability to gather details abou...
UBUNTU-CVE-2024-21501
Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system including project dependencies. An attacker could exploit this vulnerability to gather details abou...
Open-Xchange App Suite Cross-Site Scripting Vulnerability
Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite backend version 7.10.6-rev52, Open-Xchange App Suite frontend version 7.10.6-rev35, which stems from not properly cleaning up user-defined...
Open-Xchange App Suite Injection Vulnerability
Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite backend version 7.10.6-rev50, version 8.16. An attacker who exploits this vulnerability could compromise the confidentiality of informatio...
CVE-2023-43275
Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...
CVE-2023-46911
There is a Cross Site Scripting XSS vulnerability in the choosestyletree.do interface of Jspxcms v10.2.0 backend...
CVE-2023-43836
There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...
USN-6083-2 cups-filters vulnerability
USN-6083-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that cups-filters incorrectly handled the beh CUPS backend. A remote attacker could possibly use this issue to cause the backend to st...
CVE-2023-33394
skycaiji v2.5.4 is vulnerable to Cross Site Scripting XSS. Attackers can achieve backend XSS by deploying malicious JSON data...
PT-2023-23494 · Wuzhicms +1 · Wuzhi Cms +1
Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 3.1.2 Description: The issue is related to a storage type XSS vulnerability located in the backend of the Five Finger CMS b2b system. Recommendations: For Wuzhi CMS version 3.1.2, update to a version that fixes the storage...
CVE-2023-31860
Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system...
WUZHI CMS 跨站脚本漏洞
WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi WUZHI. A security vulnerability exists in Wuzhi CMS version v3.1.2, which stems from a stored XSS vulnerability in the backend...
CVE-2023-28444 angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
angular-server-side-configuration helps configure an angular application at runtime on the server or in a docker container via environment variables. angular-server-side-configuration detects used environment variables in TypeScript .ts files during build time of an Angular CLI project. The...
SiteServer CMS SQL注入漏洞
SiteServer CMS is an open source content management system CMS developed by China Billion Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection in the backend...
varnish: Request Forgery Vulnerability
An HTTP Request Forgery issue was discovered in Varnish Cache. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could be used to exploit...
varnish: Request Forgery Vulnerability
An HTTP Request Forgery issue was discovered in Varnish Cache. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could be used to exploit...
DEBIAN-CVE-2022-45060
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce...
GLSA-202210-14 : Gitea: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-14 Gitea: Multiple Vulnerabilities - Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. CVE-2022-1928 - An attacker may cause a denial of service by crafting an Accept-Language header whi...