TIBCO Security Advisory: July 18, 2023 - TIBCO EBX Add-ons -CVE-2023-26217

TIBCO EBX Add-ons SQL Injection Vulnerability Original release date: July 18, 2023 Last revised:--- CVE-2023-26217 Source: TIBCO SoftwareInc. Products Affected TIBCO EBX Add-ons versions 4.5.17 and below TIBCO EBX Add-ons versions 5.6.2 and below TIBCO EBX Add-ons version 6.1.0 The following...

[SECURITY] Fedora 37 Update: mirrorlist-server-3.0.6-6.fc37

The mirrorlist-server uses the data created by MirrorManager2 to answer client request f or the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager2 repository and it is implemented using Pytho...

PostMessage Wildcard Event Listener Detected

Web applications relying on JavaScript often need to perform cross-origin communication between Window objects such as a page and an embedded iframe or a popup window. The postMessage API allows developers to circumvent the same-origin policy restrictions in order to exchange data between scripts...

The vulnerability of the microprogrammed software of Schneider Electric Ritto Wiser Door sensor, related to information disclosure during data exchange, allows a intruder to intercept the session.

The vulnerability of Schneider Electric Ritto Wiser Door door sensors’ microprogramming software is related to the disclosure of information during data exchange. Exploiting this vulnerability could allow a intruder to intercept a session...

ROS-20230406-01

A vulnerability in the curl program is related to the incorrect replacement of the tilde character when used as a prefix in the first path element, in addition to its intended use as the first element to specify a path relative to a user's home directory. element to specify a path relative to the...

CVE-2022-28307

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Trellix Data Exchange Layer Broker 安全漏洞

The Trellix Data Exchange Layer Broker Trellix DXL Broker is a data exchange layer DXL broker from Trellix, Inc. It is installed on hosted systems and routes messages between connected clients, effectively allowing clients to connect to the DXL. A security vulnerability exists in Trellix Data...

CVE-2022-32555

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...

Cross site request forgery (csrf)

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...

CVE-2022-32555

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...

CVE-2022-32555

Unisys Data Exchange Management Studio is affected by CVE-2022-32555 due to the absence of an Anti‑CSRF token on POST requests, enabling potential CSRF. Affected versions are prior to 6.0.IC2 and 7.x prior to 7.0.IC1. Root cause: missing Anti‑CSRF protection. Impact: cross‑site forgery could perf...

CVE-2022-32555

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...

CVE-2022-32555: Cross-Site Request Forgery (CSRF)

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...

PT-2022-21367 · Unisys · Unisys Data Exchange Management Studio

Name of the Vulnerable Software and Affected Versions: Unisys Data Exchange Management Studio versions prior to 6.0.IC2 Unisys Data Exchange Management Studio versions 7.x prior to 7.0.IC1 Description: The issue is related to the absence of an Anti-CSRF token to authenticate POST requests, which...

Unisys Data Exchange Management Studio 跨站请求伪造漏洞

Unisys Data Exchange Management Studio is an application from the American company Unisys. A data exchange component. A security vulnerability exists in Unisys Data Exchange Management Studio versions prior to 6.0.IC2 and 7.x versions prior to 7.0.IC1, which stems from the absence of Anti-CSRF...

McAfee Data Exchange Layer < 6.0.0.280 Privilege Escalation (SB10383)

The instance of McAfee Datat Exchange Layer Broker for Windows installed on the remote host is prior to 6.0.0.280 and therefore affected by a privilege escalation vulnerability. This vulnerability potentially allows local users to gain elevated privileges by exploiting weak directory controls in...

McAfee Data Exchange Layer Broker Installed (Windows)

Binary data mcafeedxlwininstalled.nbin...

GHSA-HWRX-WC75-MGH7 Spree allows remote attackers to obtain sensitive information

Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0 exchanges data using JavaScript Object Notation JSON without a mechanism for validating requests, which allows remote attackers to obtain sensitive information via vectors involving 1 admin/products.json, 2 admin/users.json, or 3...

May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED

None None...

Damon data exchange platform has a logic flaw vulnerability

Ltd. is a general-purpose, platform-based data integration product with independent intellectual property rights based on more than ten years of data processing experience. There is a logic flaw vulnerability in Damon Data Exchange Platform, which can be used by attackers to obtain sensitive...