SUSE CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "" HTML tags that contain a whitespace character, i.e: "", which results in the enclosed script logic to be executed...

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 2 (5.4.4-132)

This update provides important stability, security, and performance improvements. Vulnerability id: VSTOR-75357 Fixed a critical security vulnerability. Vulnerability id: VSTOR-76306 Fixed a problem that may occur while closing files with erasure coding. Vulnerability id: VSTOR-76257 Add the...

PT-2023-12075 · Unknown · Kube-Proxy

Name of the Vulnerable Software and Affected Versions: Kube-proxy versions affected versions not specified Description: The issue concerns Kube-proxy on Windows, which can unintentionally forward traffic to local processes listening on the same port spec.ports.port as a LoadBalancer Service. This...

CVE-2021-33636

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

CVE-2021-33636

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

Code injection

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

CVE-2021-33636 Load malicious images may cause process to be hijacked

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

CVE-2021-33636

CVE-2021-33636 is discussed in connected documents as affecting iSulad used in EulerOS and related advisories. The vulnerability occurs when the isula load command is used to load malicious images, allowing attackers to execute arbitrary code on the host. According to the CVSS in the initial docu...

openEuler Security Vulnerability

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that originates from an attacker being able to execute arbitrary code when a malicious image is loaded by the isula load command...

PT-2023-12216 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: When the isula load command is used to load malicious images, attackers can execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter menuid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...

PT-2023-32344 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS affected versions not specified Description: A problematic issue has been found in flusity CMS, affecting the loadPostAddForm function of the file core/tools/posts.php. The manipulation of the edit post id argument leads to...

Qualys API Best Practices: Web Application Scanning API

This API Best Practices Series is designed for Qualys customer programmers or stakeholders with a general knowledge of programming who want to implement best practices for improving the development, design, and performance of their programs that use the Qualys API. For non-customers, the Qualys A...

flusity CMS Cross-Site Scripting Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site scripting vulnerability exists in flusity CMS, which stems from an issue with the loadCustomBlocCreateForm function in /core/tools/customblock.php in the component Dashboard, which leads t...

Oracle Application Testing Suite DoS (October 2023 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by a denial of service vulnerability as referenced in the October 2023 CPU advisory: - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for We...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the stbiloadgifmain function. An attacker can cause a denial of service by sending a crafted file. Remediation There is no fixed version for stb. References - GitHub Gist - PoC Credit: peccc...

Ping Identity PingFederate Resource Management Error Vulnerability

Ping Identity PingFederate is a flagship software-based federation server in the United States. used for identity management. A security vulnerability exists in Ping Identity PingFederate that stems from the management console not responding to a request for a carefully crafted Java class load...

Dromara Sa-Token Security Breach

Sa-Token is a lightweight Java permissions authentication framework open-sourced by dromara. Dromara Sa-Token 1.36.0 and earlier versions have a security vulnerability , the vulnerability stems from allowing remote attackers to escalate privileges through a carefully designed load...

SUSE CVE-2023-45661

stbimage is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbigifloadnext. This happens because twoback points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read when the stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to flip the image vertically. An attacker can trigger...