CVE-2018-16341

CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...

Nuxeo-CVE-2018-16341

This repository does not have a README...

CVE-2026-65637 vulnerabilities

Vulnerabilities for packages: kayenta, apache-tomee, nuxeo, kayenta-fips...

GHSA-F525-44XV-F2QJ vulnerabilities

Vulnerabilities for packages: kayenta, apache-tomee, nuxeo, kayenta-fips...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: apache-polaris, knative-kafka-broker-fips, druid, automq-fips, metabase, automq, cassandra, flink-kubernetes-operator-fips, seata, strimzi-kafka-operator, wildfly, kayenta-fips, akhq, confluent-kafka-jre-bcfips, pinot-fips, conductor, debezium-connector-db2, hono,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: apache-polaris, knative-kafka-broker-fips, druid, automq-fips, metabase, automq, cassandra, flink-kubernetes-operator-fips, seata, strimzi-kafka-operator, wildfly, kayenta-fips, akhq, confluent-kafka-jre-bcfips, pinot-fips, conductor, debezium-connector-db2, hono,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: apache-polaris, knative-kafka-broker-fips, druid, automq-fips, metabase, automq, cassandra, flink-kubernetes-operator-fips, seata, strimzi-kafka-operator, wildfly, kayenta-fips, akhq, confluent-kafka-jre-bcfips, pinot-fips, conductor, debezium-connector-db2, hono,...

GHSA-JH4V-GFQJ-7RHX vulnerabilities

Vulnerabilities for packages: logstash, druid, zipkin, cassandra-reaper, conductor-fips, logstash-fips, thingsboard, traccar, nuxeo, conductor, traccar-fips...

Nuxeo Platform Login Panel - Detect

Nuxeo Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxeo Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxeo Platform Login Panel - Detect',...

Nuxeo <10.3 - Remote Code Execution Detection

Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxeo prior to version 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Nuxeo <10.3 - Remote Code Execution

Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection. id: CVE-2018-16341 info: name: Nuxeo 10.3 - Remote Code Execution author: madrobot severity: high description: | Nuxeo prior to version 10.3 is susceptible to a...

EUVD-2017-14945

Malware in sbrugna...

EUVD-2013-4380

Malware in sbrugna...

EUVD-2023-0583

Malicious code in bioql PyPI...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

Security Bulletin: IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system [CVE-2013-4521, CVE-2013-2165 and CVE-2018-14667]

Summary IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system CVE-2013-4521. IBM Security Verify Governance is vulnerable to remote attacks caused by an error related to the handling of deserialization CVE-2013-2165. IBM Security Verify Governance ...

Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

GHSA-X347-FC9W-W7C3 Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...