Lucene search
+L

16243 matches found

CNVD
CNVD
•added 2023/07/18 12:00 a.m.•45 views

Froxlor Command Execution Vulnerability

Froxlor is a set of lightweight server management software from the Froxlor team. A command execution vulnerability exists in versions prior to froxlor 2.0.21 that stems from an output encoding or escaping error. An attacker can exploit the vulnerability to cause command execution...

9.1CVSS8.2AI score0.01008EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/07/16 11:15 a.m.•28 views

CVE-2023-3684

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

6.1CVSS5.1AI score0.00319EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/16 11:15 a.m.•36 views

CVE-2023-3684

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

6.1CVSS0.00319EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/16 11:15 a.m.•43 views

Open redirect

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

4CVSS6.2AI score0.00319EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/16 10:31 a.m.•14 views

CVE-2023-3684 LivelyWorks Articart Base64 Encoding de_DE redirect

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

4CVSS5.1AI score0.00319EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/16 10:31 a.m.•52 views

CVE-2023-3684 LivelyWorks Articart Base64 Encoding de_DE redirect

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

4CVSS6.5AI score0.00319EPSS
SaveExploits0References2
CVE
CVE
•added 2023/07/16 10:31 a.m.•58 views

CVE-2023-3684

CVE-2023-3684 affects LivelyWorks Articart 2.0.1, specifically the Base64 Encoding Handler’s file at /change-language/de_DE. The vulnerability arises from manipulating the redirectTo argument, causing an open redirect that could be exploited remotely. Several sources corroborate this issue, with ...

6.1CVSS5.1AI score0.00319EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/16 12:00 a.m.•10 views

CVE-2023-3684: URL Redirection to Untrusted Site

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/deDE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack ma...

6.1CVSS5.1AI score0.00319EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/16 12:00 a.m.•20 views

PT-2023-25723 · Livelyworks · Livelyworks Articart

Name of the Vulnerable Software and Affected Versions: LivelyWorks Articart version 2.0.1 Description: A problematic issue was found in the Base64 Encoding Handler component, specifically affecting some unknown functionality of the file /change-language/de DE. The manipulation of the redirectTo...

6.1CVSS5.3AI score0.00319EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/07/16 12:00 a.m.•20 views

LivelyWorks Articart has a vulnerability in input validation.

LivelyWorks Articart is an application from LivelyWorks, Inc. An input validation error vulnerability exists in LivelyWorks Articart version 2.0.1, which stems from the presence of an unknown function in the file /change-language/deDE in the component Base64 Encoding Handler, which causes a...

6.1CVSS5.5AI score0.00319EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2023/07/14 3:19 p.m.•14 views

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.PDFStreamParser.parseNextToken

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=6214593083736064 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

5.9AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2023/07/14 3:32 a.m.•86 views

GHSA-C6V5-PF66-XFQ8 Froxlor vulnerable to Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7.8AI score0.01008EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/07/14 3:32 a.m.•43 views

Froxlor vulnerable to Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7.8AI score0.01008EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/07/14 1:15 a.m.•54 views

CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS0.01008EPSS
SaveExploits1References2
Prion
Prion
•added 2023/07/14 1:15 a.m.•27 views

Input validation

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

5.8CVSS7AI score0.01008EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/07/14 12:00 a.m.•85 views

CVE-2023-3668

CVE-2023-3668 affects Froxlor (froxlor/froxlor) prior to version 2.0.21. The root cause is an improper encoding or escaping of output in the repository, which enables a command-execution vulnerability. Multiple sources confirm the impact as command execution in versions before 2.0.21. Remediation...

9.1CVSS7.8AI score0.01008EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2023/07/14 12:00 a.m.•49 views

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7.8AI score0.01008EPSS
SaveExploits1References4
Mend
Mend
•added 2023/07/14 12:00 a.m.•14 views

CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.4CVSS7.8AI score0.01008EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/14 12:00 a.m.•23 views

Froxlor security vulnerabilities

Froxlor is a set of lightweight server management software from the Froxlor team. A command execution vulnerability exists in versions prior to froxlor 2.0.21 that stems from an output encoding or escaping error. An attacker can exploit the vulnerability to cause command execution...

9.1CVSS8.2AI score0.01008EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/14 12:00 a.m.•14 views

PT-2023-25676 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.21 Description: The issue is related to improper encoding or escaping of output in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.21, update to version 2.0.21 or later to resolv...

9.1CVSS7.9AI score0.01008EPSS
SaveExploits1References9
Rows per page
Query Builder