11722 matches found
GO-2022-0703 XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes...
PT-2024-10767 · Opentext · Opentext Self Service Password Reset
Name of the Vulnerable Software and Affected Versions: OpenText Self Service Password Reset versions prior to 4.5.0.2 OpenText Self Service Password Reset versions prior to 4.4.0.6 Description: The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting XSS...
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a critical security flaw impacting Jenkins to its Known Exploited Vulnerabilities KEV catalog, following its exploitation in ransomware attacks. The vulnerability, tracked as CVE-2024-23897 CVSS score: 9.8, is a path travers...
7Twenty BOT 跨站脚本漏洞
7Twenty BOT is an artificial intelligence-based digital system from 7Twenty. A cross-site scripting vulnerability exists in 7Twenty BOT that stems from improper input neutralization during web page generation...
PT-2024-30484 · Unknown · Registrationmagic
Name of the Vulnerable Software and Affected Versions: RegistrationMagic versions through 6.0.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-Site Scripting XSS. This allows for Cross-Site Scripting XSS in the Metagauss Use...
CVE-2024-43278
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Phi Phan Meta Field Block allows Stored XSS.This issue affects Meta Field Block: from n/a through 1.2.13...
CVE-2024-43318
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in E2Pdf.Com allows Stored XSS.This issue affects e2pdf: from n/a through 1.25.05...
CVE-2024-43327
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.This issue affects Invite Anyone: from n/a through 1.4.7...
CVE-2024-43324
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons for Elementor: from n/a through 2.2.0...
CVE-2024-25008
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...
CVE-2024-25008 Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...
Adobe Illustrator Improper Input Validation Vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
CVE-2024-41856
Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-34118 Adobe illustrator 2024 TIF File parsing Division by zero denial of service
Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of...
CVE-2024-34118 Adobe illustrator 2024 TIF File parsing Division by zero denial of service
Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of...
CVE-2024-34118
Adobe Illustrator is affected by CVE-2024-34118 (and related advisories) due to an Improper Input Validation vulnerability that can cause a denial-of-service. Affected are Illustrator 28.5, 27.9.4 and earlier; exploitation requires a user to open a malicious file, which could cause the applicatio...
CVE-2024-41856 Illustrator | Improper Input Validation (CWE-20)
Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-7790
A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly decoded user input...
PT-2024-28028 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS versions prior to 1.26.0 Dell BIOS versions prior to 1.35.0 Dell BIOS versions prior to 2.32.0 Description: The issue is related to an Improper Input Validation vulnerability in an externally developed component of Dell BIOS. A high...