1596 matches found
Apache Archiva Reflected Cross-site Scripting vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...
CVE-2024-27140
UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended...
Cross site scripting
UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended...
CVE-2024-27140
The Apache Archiva project (version 2.0.0 and later) is vulnerable to a Reflected Cross-site Scripting (XSS) vulnerability caused by the improper neutralization of input during web page generation. This flaw exists in the org.apache.archiva, archiva-common component, allowing an attacker to injec...
PT-2024-21671 · Apache · Apache Archiva
Name of the Vulnerable Software and Affected Versions: Apache Archiva versions 2.0.0 and later Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This affects Apache Archiva, a product that is no longer supported b...
CentOS 9 : curl-7.76.1-22.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-22.el9 build changelog. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP...
Exploit for Injection in Atlassian Confluence_Data_Center
Project Introduction This project refers to the project of B...
CVE-2024-1359
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
CVE-2024-1359
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
Command injection
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
CVE-2024-1359 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
CVE-2024-1359
Summary: CVE-2024-1359 is a command injection vulnerability in GitHub Enterprise Server that allowed an attacker with the Management Console’s editor role to escalate to admin/root SSH access when configuring an HTTP proxy. Affected products/versions: all GitHub Enterprise Server versions prior t...
CVE-2024-1359: Improper Input Validation
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
GitHub: Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. This vulnerability affected all versions of GitHub Enterprise Server prior t...
http-proxy-with-cors (>=1.2.2, <=1.2.4) potentially affected by CVE-2023-51701 via @fastify/reply-from (9.1.0)
@fastify/reply-from NPM version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/reply-from and may be impacted: - http-proxy-with-cors =1.2.2, =1.2.4 Source cves: CVE-2023-51701 Source advisory: OSV:GHSA-V2V2-HPH8-Q5XP...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-pipelines, kubeflow-centraldashboard, configurable-http-proxy, kibana, arangodb, lerna, opensearch-dashboards...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: lerna, kubeflow-centraldashboard, configurable-http-proxy, kubeflow-pipelines...
CVE-2023-26159 vulnerabilities
Vulnerabilities for packages: lerna, kubeflow-centraldashboard, configurable-http-proxy, kubeflow-pipelines...