CVE-2022-43934

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

GHSA-998C-Q8HH-H8GV Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

CVE-2024-8660

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient sanitization of the Top Navigator Bar block output. An attacker can execute arbitrary scripts in the context of the user's browser session ...

CVE-2024-8660 Stored XSS in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

CVE-2024-8660

CVE-2024-8660 affects Concrete CMS versions 9.0.0–9.3.3. It is a stored XSS in the "Top Navigator Bar" block caused by insufficient sanitization; a rogue administrator could inject payloads that execute when targeted users visit the home page. Versions below 9.0.0 are unaffected due to absence of...

CVE-2024-8660 Stored XSS in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

CVE-2024-8660 Stored XSS in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

Security Bulletin: IBM Content Navigator is vulnerable to Cross Site Port Attack due to Daeja ViewONE (CVE-2024-31897)

Summary Daeja ViewOne Virtual is used by IBM Content Navigator as part of the document viewer. CVE-2024-31897 Vulnerability Details CVEID:CVE-2024-31897 DESCRIPTION: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0....

Security Bulletin: IBM Content Navigator is vulnerable to Denial of Service (DoS) due to Apache Commons Compress (CVE-2024-26308, CVE-2024-25710)

Summary Apache Commons Compress is used by IBM Content Navigator to work with archive files. CVE-2024-26308, CVE-2024-25710 Vulnerability Details CVEID:CVE-2024-26308 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out of memory error. By persuading a victi...

Security Bulletin: IBM Content Navigator is vulnerable to Server Side Request Forgery leading to Arbitrary File Read due to Oracle Outside In Technology (CVE-2023-35896)

Summary Oracle Outside In Technology is used in some configurations of IBM Content Navigator as part of the document viewer. CVE-2023-35896. Vulnerability Details CVEID:CVE-2023-35896 DESCRIPTION: IBM Content Navigator is vulnerable to server-side request forgery SSRF. This may allow an...

The vulnerability in the web client of IBM Datacap Navigator software for document collection and processing involves the absence of a “Secure” flag in session cookies. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing lies in the absence of a “Secure” flag in the session cookies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by intercepting the...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves the unencrypted storage of critical information, allowing an intruder to gain unauthorized access to protected data.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves defects in the error reporting mechanism, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the IBM Datacap Navigator web client software, which is used for collecting and processing IBM Datacap documents, arises from an improper limitation on the path to the restricted access catalog. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the IBM Datacap Navigator software, a web-based application for document collection and processing, is related to an incorrect limitation on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves security flaws in the source code of IBM Datacap, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves deficiencies in the security protection of operational data in the source code. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves the use of cryptographic algorithms that contain defects, allowing attackers to decrypt confidential information.

The vulnerability of the IBM Datacap Navigator software for document collection and processing lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to decrypt confidential information remotely...

The vulnerability in the web client of IBM Datacap Navigator software for document collection and processing allows unauthorized individuals to access system data, enabling them to disclose protected information.

The vulnerability of the IBM Datacap Navigator software for document collection and processing lies in the fact that system data can be disclosed to unauthorized individuals. Exploiting this vulnerability allows a malicious actor to disclose protected information by sending specially crafted HTTP...

The vulnerability in the web client of IBM Datacap Navigator software for document collection and processing allows attackers to execute cross-site scripting attacks, cache poisoning attacks, or intercept sessions. This vulnerability is related to deficiencies in HTTP request processing.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the processing of HTTP header requests. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks, cache poisoning attacks, or...