9658 matches found
CVE-2021-1410
A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The vulnerability is due to insufficient authorization enforcement for requests to update...
CVE-2021-1410 Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability
A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The vulnerability is due to insufficient authorization enforcement for requests to update...
CVE-2021-1410 Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability
A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The vulnerability is due to insufficient authorization enforcement for requests to update...
CVE-2021-1410: Improper Access Control
A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The vulnerability is due to insufficient authorization enforcement for requests to update...
Fedora: Security Advisory (FEDORA-2024-e7bb8bc2da)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
com.hazelcast.jet:hazelcast-jet-cdc-debezium (>=5.2.0, <=5.2.5), com.hazelcast.jet:hazelcast-jet-cdc-mysql (>=5.2.0, <=5.2.5) +59 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.9.5.final)
io.debezium:debezium-core MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-debezium =5.2.0, =5.2.0, =5.2.0, =5.2.0, =1.0.64, =1.0.75 -...
com.hazelcast.jet:hazelcast-jet-cdc-mysql (>=5.3.0-beta-1, <=5.3.8), com.hazelcast:hazelcast-distribution (5.3.0-beta-1) +10 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.9.7.final)
io.debezium:debezium-connector-mysql MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-mysql =5.3.0-beta-1, =2.4.0, =0.1.0,...
com.hazelcast.jet:hazelcast-jet-cdc-mysql (5.2-beta-1), com.hazelcast:hazelcast-distribution (5.2-beta-1) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.9.3.final)
io.debezium:debezium-connector-mysql MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-mysql 5.2-beta-1 -...
Fedora 37 : golang-github-docker-distribution (2022-21aa9bae12)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-21aa9bae12 advisory. Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc37. Changelog Sun Aug 21 2022 Robert-Andr Mauchin 2.8.1-2 - Upda...
CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...
CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...
CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...
CVE-2024-5125
CVE-2024-5125 affects parisneo/lollms-webui version 9.6, where SVG processing during file upload enables two issues: Cross‑Site Scripting (XSS) and Open Redirect. The root cause is inadequate input validation and handling of SVG files in the upload flow, allowing embedded JavaScript execution and...
Intel Distribution for GDB Uncontrolled Search Path Privilege Escalation
The vulnerability in the set of development libraries for Intel Distribution for GDB software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to increase their privileges...
Kerberos KDC Proxy Protocol Code Execution
The vulnerability of the Kerberos Key Distribution Center KDC Proxy Protocol implementation in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Action Dispatch Component Ruby DoS
The vulnerability of the Action Dispatch component in the Action Pack extension’s Ruby interpreter involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Fedora 37 : golang-github-distribution-3 (2022-741325e9a0)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-741325e9a0 advisory. Update to 3.0.0 pre1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...
Fedora 38 : golang-github-docker-distribution (2022-59cb9da3d4)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-59cb9da3d4 advisory. Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc38. Changelog Sun Aug 21 2022 Robert-Andr Mauchin 2.8.1-2 - Upda...
CVE-2024-32048
Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...