5068 matches found
Broadcom Symantec Messaging Gateway 跨站脚本漏洞
Broadcom Symantec Messaging Gateway Broadcom SMG is an internal email security solution from Broadcom Corporation USA. A cross-site scripting vulnerability exists in Broadcom Symantec Messaging Gateway versions prior to 10.8 that originates. , an authenticated user with the ability to add/edit...
PT-2022-17421 · Symantec · Messaging Gateway
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated user with the privilege to add or edit annotations on the Content tab to craft a malicious annotation. This malicious...
Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.10.2 release and security update
Red Hat AMQ Broker 7.10.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Moderate: Red Hat Security Advisory: dbus security update
An update for dbus is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
This Week in Spring - December 6th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? You know what Ive wanted to do? See my friends on the Spring team in person since the pandemic descended. And, Im overjoyed to relate, Ive just had the privilege of a nice meeting with several of them last night...
A Bootiful Podcast: Java Champion Gunnar Morling about messaging middleware, Debezium, change data capture, and more.
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Java Champion Gunnar Morling @gunnarmorling about messaging middleware, Debezium, and more...
Design/Logic Flaw
Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...
CVE-2022-46148 Discourse allows self-XSS through malicious composer message
Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...
CVE-2022-46148
Discourse self-XSS vulnerability (CVE-2022-46148) affects the Discourse open‑source platform. In versions 2.8.10 and earlier on stable, and 2.9.0.beta11 and earlier on beta/tests-passed branches, a user able to craft malicious messages and navigate to the drafts page could trigger self‑XSS, poten...
CVE-2022-46148 Discourse allows self-XSS through malicious composer message
Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...
CVE-2022-45278
creationtimestamp| type| source ---|---|--- 2022-11-24 00:14:19+00:00| seen| https://t.me/cibsecurity/53468...
CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...
CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...
CVE-2022-40216
CVE-2022-40216 affects the WordPress Better Messages plugin. Affected versions are
CVE-2022-43673
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...
PT-2022-25288 · WordPress · Bp Better Messages
Name of the Vulnerable Software and Affected Versions: Better Messages plugin versions = 1.9.10.69 Description: The issue is related to an authentication bypass vulnerability in the Better Messages plugin for WordPress, specifically affecting messaging block functionality for subscribers and abov...
PT-2022-35133 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the rpmsg char, where a double destroy of the default endpoint can occur. This problem was introduced in version v5.18 and is fixed in Linux Kernel version v6.0.3. The...
CVE-2022-41913
CVE-2022-41913 affects the Discourse-calendar plugin for Discourse. When discourse_post_event_enabled is on, users can list members of private groups or private-group members in dynamic calendar posts, enabling disclosure of group membership. The issue is mitigated by upgrading to a version that ...
[SECURITY] Fedora 37 Update: dbus-1.14.4-1.fc37
D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...
