16243 matches found
CVE-2024-7631 Openshift-console: openshift console: path traversal
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
CVE-2024-7631 Openshift-console: openshift console: path traversal
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
CVE-2024-7631
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
CVE-2024-7631 Openshift-console: openshift console: path traversal
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
CVE-2024-7631
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
PT-2025-11963
Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.53 Description The issue is related to a cross-site scripting vulnerability in the Secure Access administrative console. Attackers with system administrator permissions can interfere with another...
RockyLinux 9 : bluez (RLSA-2024:9413)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9413 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP Improper...
Absolute Secure Access 安全漏洞
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in Absolute Secure Access versions prior to 13.53, which stems from a cross-site scripting vulnerability in the Secure...
Absolute Secure Access 安全漏洞
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in Absolute Secure Access versions prior to 13.53, which stems from a cross-site scripting vulnerability in the Secure...
Red Hat OpenShift Console 路径遍历漏洞
Red Hat OpenShift Console is an OpenShift console from Red Hat, Inc. A path traversal vulnerability exists in Red Hat OpenShift Console that stems from an insecure file path construction, which could allow an authenticated user to retrieve an arbitrary JSON file on the console by manipulating the...
PT-2025-11957
Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description A flaw was found in the OpenShift Console, specifically in an endpoint for plugins to serve resources in multiple languages, located at "/locales/resources.json". This endpoint uses...
CVE-2025-27705: Improper Neutralization of Input During Web Page Generation
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator...
PT-2025-11962
Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.53 Absolute Secure Access versions prior to 13.07 Description The issue is related to a cross-site scripting vulnerability in the Secure Access administrative console. Attackers with system...
CVE-2025-27704: Improper Neutralization of Input During Web Page Generation
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator...
CVE-2024-7631: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
Cross-Site Scripting (XSS)
org.apache.felix, org.apache.felix.http.webconsoleplugin is vulnerable to cross-site scripting XSS. The vulnerability is due to improper neutralization of user input during web page generation, allowing an attacker to inject and execute malicious scripts in a victim’s browser through improperly...
PT-2025-18214 · Finit +1 · Finit +1
Name of the Vulnerable Software and Affected Versions: Finit versions 3.0-rc1 through 4.11 Description: Finit is a fast init for Linux systems. The issue concerns the implementation of getty for the tty configuration directive, which can bypass /bin/login, allowing a user to log in as any user...
Sytel Softdial Contact Center（Sytel SCC） 代码问题漏洞
Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A code issue vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from an unrestricted file upload in the /softdial/phpconsole/upload.php endpoint, which could lead to code executio...
WEM Agents are not listed in Console and failed to register
WEM Agents are not listed in Console and failed to register, Citrix WEM Agent Host Service Debug.log and Event Logs shows the below exception. ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient : System.ServiceModel.Security.SecurityNegotiationException : The caller was not authenticate...