CVE-2023-22261 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22256 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22264 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22262 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22257 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22265 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22259 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22258 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22263 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

CVE-2023-22271 AEM Weak Cryptography for Passwords Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful...

CVE-2023-22266 AEM URL Redirection to Untrusted Site Security feature bypass

Experience Manager versions 6.5.15.0 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interactio...

Tridium Niagara AX Path Traversal (CVE-2012-4701)

Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging 1 valid credentials or 2 the guest feature. This plugin only works with Tenable.ot. Please visit...

Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure Vulnerability

Adobe Connect versions 11.4.5 and below as well as versions 12.1.5 and below suffer from a file disclosure vulnerability. Title: adobe connect - Local File Disclosure / Download security feature bypass vulnerability Author: h4shur CVE: CVE-2023-22232 Vendor Homepage: https://www.adobe.com Softwar...

Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure

Title: adobe connect - Local File Disclosure / Download security feature bypass vulnerability Author: h4shur date:2021.01.16-2023.02.17 CVE: CVE-2023-22232 Vendor Homepage: https://www.adobe.com Software Link: https://www.adobe.com/products/adobeconnect.html Version: 11.4.5 and earlier, 12.1.5 an...

Fedora 36 : sudo (2023-cb5df36beb)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-cb5df36beb advisory. Security fix for CVE-2023-27320 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Vulnerability of the parse_lease_state() function (fs/ksmbd/oplock.c) in the SMB subsystem of the Linux operating system, allowing a hacker to trigger a service failure

The vulnerability of the parseleasestate function fs/ksmbd/oplock.c in the SMB subsystem of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe Commerce License Issue Vulnerability (CNVD-2024-09608)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce is vulnerable to an authorization issue. The vulnerability stems from improper authorization of the application and can be exploited by a...

Update now! Microsoft fixes two zero-day bugs

Microsoft, and other vendors, have released their monthly updates. In total Microsoft has fixed a total of 101 vulnerabilities for several titles including Edge, with two of them being actively exploited zero-days. On top of that, Adobe has fixed an actively exploited vulnerability in ColdFusion...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce is vulnerable to an authorization issue. The vulnerability stems from improper authorization of the application and can be exploited by a...

Adobe Experience Manager 6.5.0.0 < 6.5.16.0 Multiple Vulnerabilities (APSB23-18)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.16.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-18 advisory. - Experience Manager versions 6.5.15.0 and earlier are affected by a reflected Cross-Site Scripting XSS...