CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

The CVE-2021-38713 entry concerns imgURL 2.31, where a cross-site scripting (XSS) vulnerability can be triggered via the X-Forwarded-For HTTP header. Public references and multiple security trackers (Red Hat, GHSA, OSV, NVD, CNVD, etc.) consistently describe imgURL 2.31 as vulnerable to XSS throu...

imgurl跨站脚本漏洞

imgurl is a simple, pure graph bed program developed using PHP + SQLite 3. A cross-site scripting vulnerability exists in imgURL version 2.31, which allows attackers to trigger cross-site scripting via the X-Forwarded-For HTTP header...

Authorization Bypass

nilsteampassnet/teampass is vulnerable to authorization bypass. Sending an X-Forwarded-For client HTTP header to the getIp function allows any users with a valid API token to bypass IP address whitelist restrictions...

GHSA-FV48-HJHP-94C7 Incorrect Authorization in TeamPass

The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function...

CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

Nightscout Web Monitor 跨站脚本漏洞

Nightscout Web Monitor is an open source web monitor for healthcare that allows multiple caregivers to remotely view a patient's blood glucose data in real time. A security vulnerability exists in Nightscout Web Monitor a.k.a. cgm-remote-monitor 14.2.2 that allows XSS via a crafted x - forward -...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

Cross site scripting

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-18979

Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...

CVE-2020-18979

Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...

Cross site scripting

Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...

CVE-2020-18979

Halo 0.4.3 is affected by a Cross-Site Scripting (XSS) vulnerability via the X-forwarded-for header parameter. The root cause is improper handling of the X-forwarded-for header that allows injection of script code, enabling client-side code execution. Exploitation details are not provided in the ...

CVE-2020-18979

Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...

Halo 跨站脚本漏洞

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability via the X-forwarded-for Header parameter in Halo 0.4.3. An attacker could exploit the vulnerability to execute client-side...

linuxptp security update

2.0-2.el79.1 - validate length of forwarded messages CVE-2021-3570...

Oracle Linux 8 : linuxptp (ELSA-2021-2660)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-2660 advisory. 2.0-5.el84.1 - validate length of forwarded messages CVE-2021-3570 Tenable has extracted the preceding description block directly from the Oracle Linux security...