BIT-MEDIAWIKI-2022-29907

The Nimbus skin for MediaWiki through 1.37.2 before 6f9c8fb868345701d9544a54d9752515aace39df allows XSS in Advertise link messages...

Denial of Service in Connect2id Nimbus JOSE+JWT

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

GHSA-GVPG-VGMX-XG6W Denial of Service in Connect2id Nimbus JOSE+JWT

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

CVE-2023-52428

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

Code injection

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

CVE-2023-52428

CVE-2023-52428 (Nimbus JOSE+JWT) : In Connect2id Nimbus JOSE+JWT prior to 9.37.2, an attacker can trigger a denial of service (resource exhaustion) by sending a large JWE p2c header value (iteration count) for the PasswordBasedDecrypter (PBKDF2) component. This is a component-level vulnerability ...

CVE-2023-52428

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

CVE-2023-52428

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...

Connect2id Nimbus JOSE+JWT Security Vulnerability

Connect2id Nimbus JOSE+JWT is a Java-based open source JWT JSON Web Tokens implementation from Connect2id. A security vulnerability exists in Connect2id Nimbus JOSE+JWT versions prior to 9.37.2 that stems from an attacker being able to cause a denial of service via a header value...

PT-2024-3099

Name of the Vulnerable Software and Affected Versions Connect2id Nimbus JOSE+JWT versions prior to 9.37.2 Confluence Data Center and Server versions prior to 7.19.23 Confluence Data Center and Server versions prior to 8.5.11 Confluence Data Center and Server versions prior to 8.6.2 Confluence Dat...

susannebothe.nimbuscloud.at Cross Site Scripting vulnerability OBB-3842178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26218

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the...

CVE-2023-26218

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the...

CVE-2023-26218 TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the...

CVE-2023-26218 TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the...

CVE-2023-26218

CVE-2023-26218 affects the Web Client component of TIBCO Nimbus (versions 10.6.0 and below). This is a reflected Cross-Site Scripting (XSS) vulnerability that enables a low-privilege attacker to social engineer a legitimate user with network access to run scripts in the context of the affected sy...

TIBCO Software Nimbus Cross-Site Scripting Vulnerability

TIBCO Software Nimbus is a business application for process documentation from TIBCO Software, USA. A cross-site scripting vulnerability exists in TIBCO Software Nimbus version 10.6.0 and earlier. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the...

PT-2023-20545 · Tibco Software · Tibco Nimbus

Name of the Vulnerable Software and Affected Versions: TIBCO Nimbus versions 10.6.0 and below Description: The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities. These vulnerabilities allow a low privileged...

TIBCO Security Advisory: September 27, 2023 - TIBCO Nimbus -CVE-2023-26218

TIBCO Nimbus Reflected Cross-site Scripting XSS vulnerabilities Original releasedate: September 27, 2023 Last revised: November 20, 2023 CVE-2023-26218 Source: TIBCO Software Inc. Products Affected TIBCO Nimbus versions 10.6.0 and below The following component is affected: Web Client Description...

TIBCO Security Advisory: September 27, 2023 - TIBCO Nimbus -CVE-2023-26218

TIBCO Nimbus Reflected Cross-site Scripting XSS vulnerabilities Original releasedate: September 27, 2023 Last revised: November 20, 2023 CVE-2023-26218 Source: TIBCO Software Inc. Products Affected TIBCO Nimbus versions 10.6.0 and below The following component is affected: Web Client Description...