32 matches found
PT-2022-28082 · Dropbox · Dropbox
Name of the Vulnerable Software and Affected Versions: Dropbox merou affected versions not specified Description: A critical issue was found in the SSH Public Key Handler component, specifically in the add public key function of the grouper/public key.py file. The manipulation of the public key s...
com.jalalkiswani:jk-faces (>=0.0.1 <=0.0.9-4), com.jalalkiswani:jk-web (>=0.0.3 <=0.0.9-2) +5 more potentially affected by CVE-2021-28490 via org.owasp:csrfguard (>=3.0.0 <=3.1.0)
org.owasp:csrfguard MAVEN version =3.0.0, =0.0.1, =0.0.3, =0.0.9, =0.0.7, =2.3.0, =2.6.10, =2.9.0-01, =2.16.0-01 Source cves: CVE-2021-28490 Source advisory: OSV:GHSA-JX66-5WW9-M6Q4...
com.yubico.java:yubico-validation-client (=2.0RC3), com.yubico:yubico-jaas-module (>=2.0.1 <=3.1.0) +4 more potentially affected by CVE-2014-3607 via edu.vt.middleware:vt-ldap (>=3.3.2 <=3.3.5)
edu.vt.middleware:vt-ldap MAVEN version =3.3.2, =2.0.1, =2.0.0, =2.2.0, =2.0.0, =2.3.0 Source cves: CVE-2014-3607 Source advisory: OSV:GHSA-273V-G3X4-R3RC...
CVE-2018-19794
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...
CVE-2018-19794
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...
CVE-2018-19794
The CVE-2018-19794 entry describes a Cross-site Scripting (XSS) vulnerability in UiV2Public.index of Internet2 Grouper versions 2.2 and 2.3, allowing remote attackers to inject arbitrary web script or HTML via the code parameter. Affected product is Internet2 Grouper (UiV2Public.index) with the u...
CVE-2018-19794
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...
Internet2 Grouper Cross-Site Scripting Vulnerability
Internet2 Grouper is a distributed IT central access management system. A cross-site scripting vulnerability exists in UiV2Public.index in Internet2 Grouper versions 2.2 and 2.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'code' parameter...
Grouper - A PowerShell script for helping to find vulnerable settings in AD Group Policy
Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft's Group Policy module and identifies all the settings defined in...
Find Vulnerable Settings in AD Group Policy: Grouper
Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft’s Group Policy module and identifies all the settings defined in...
CVE-2014-2706
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service system crash via network traffic that improperly interacts with the WLANSTAPSSTA state aka power-save mode, related to stainfo.c and tx.c...