9 matches found
EUVD-2022-53470
Malicious code in bioql PyPI...
CVE-2022-32273
As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core MDCore before 5.1.2 could allow an authenticated user to enumerate filenames on the server...
Opswat Metadefender Core security vulnerability
OPSWAT MetaDefender Core OPSWAT MDCore is a multi-engine anti-malware software from OPSWAT, Inc. It prevents the upload of malicious files on web applications that bypass sandboxing and other detection-based security solutions. A security vulnerability exists in Opswat Metadefender Core versions...
CVE-2023-25364: Improper Neutralization of Input During Web Page Generation
Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks...
CVE-2022-32272
CVE-2022-32272 affects OPSWAT MetaDefender Core prior to 5.1.2, MetaDefender ICAP prior to 4.12.1, and MetaDefender Email Gateway Security prior to 5.6.1. The issue is due to incorrect access control, enabling privilege escalation. The Red Hat advisory and related sources confirm the same affecte...
CVE-2022-32272: Improper Privilege Management
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation...
CVE-2022-32273
As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core MDCore before 5.1.2 could allow an authenticated user to enumerate filenames on the server...
PT-2022-21198
Name of the Vulnerable Software and Affected Versions OPSWAT MetaDefender Core versions prior to 5.1.2 Description The issue is related to an observable discrepancy in returned messages, which could allow an authenticated user to enumerate filenames on the server. Recommendations For versions pri...
CVE-2022-32273: Observable Discrepancy
As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core MDCore before 5.1.2 could allow an authenticated user to enumerate filenames on the server...