5019 matches found
CVE-2022-29556
CVE-2022-29556 affects the iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2. The vulnerability arises from the Azure IoT Hub integration, which exposes SSRF primitives that can be used to execute cross-tenant actions via internal API endpoints. This leads to potentia...
CVE-2022-29811
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...
CVE-2022-29811
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...
CVE-2022-29811
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...
Cross site scripting
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...
CVE-2022-29811
JetBrains Hub contains a stored XSS vulnerability in project icons prior to version 2022.1.14638. The issue affects JetBrains Hub (web-based team tool) and is exploitable by injecting malicious content into a project icon, enabling script execution for affected users. The CVE-2022-29811 entry not...
CVE-2022-29811
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...
JetBrains Hub 跨站脚本漏洞
JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in versions prior to JetBrains Hub 2022.1.14638, which stems from an attack that stores cross-site scripting via...
Northern.tech Mender Enterprise 代码问题漏洞
Northern.tech Mender Enterprise is a wireless update manager for IoT devices from Northern.tech. A security vulnerability exists in Northern.tech Mender Enterprise prior to version 3.2.2, which stems from the iot-manager microservice 1.0.0 that allows SSRF because the Azure IoT Hub integration...
Security Bulletin: Vulnerability in SSLv3 affects IBM InfoSphere Master Data Management (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM InfoSphere Master Data Management. Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attacker to obtain...
CVE-2022-21450
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: My Links. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL...
CVE-2022-21450
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: My Links. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL...
CVE-2022-21450
CVE-2022-21450 affects Oracle PeopleSoft’s PRTL Interaction Hub (component: My Links) in version 9.1. The vulnerability is exploitable by a low-privilege, network-accessible attacker over HTTP, with user interaction required, potentially leading to unauthorized update/insert/delete and read acces...
CVE-2022-21450
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: My Links. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL...
Oracle PeopleSoft Enterprise PRTL Interaction Hub输入验证错误漏洞
Oracle PeopleSoft Enterprise PRTL Interaction Hub is an Enterprise Portal Interaction Center component from Oracle Corporation. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PRTL Interaction Hub product that could allow a low-privileged attacker with network access...
Microsoft Windows Feedback Hub 权限许可和访问控制问题漏洞
Microsoft Windows Feedback Hub is a Windows general purpose application from Microsoft Corporation USA designed to allow users to provide feedback, feature suggestions, and bug reports for the operating system. Microsoft Windows Feedback Hub is vulnerable to privilege permission and access contro...
Medical Hub Directory Site 1.0 SQL Injection
Title: Medical Hub Directory Site 1.0 Blind Time SQLi To Rce Author: Hejap Zairy Date: 30.07.2022 Vendor: https://www.sourcecodester.com/php/15252/simple-medical-hub-directory-site-phpoop-source-code.html Software:https://www.sourcecodester.com/sites/default/files/download/oretnom23/mhds.zip...
Medical Hub Directory Site 1.0 Cross Site Scripting Vulnerability
Title: Medical Hub Directory Site 1.0 XSS Stored Author: Hejap Zairy Vendor: https://www.sourcecodester.com/php/15252/simple-medical-hub-directory-site-phpoop-source-code.html Software:https://www.sourcecodester.com/sites/default/files/download/oretnom23/mhds.zip Reference:...
Cross-Site Scripting (XSS)
pimcore/data-hub is vulnerable to stored cross-site scripting. The vulnerability exists because the configuration values are not escaped properly which allows a malicious attacker to inject and execute arbitrary javascript...
