367 matches found
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird to version 143.0 or higher...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox to version 143.0 or higher...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird-ESR to version 140.3 or...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or higher...
Origin Validation Error
Overview mcp-neo4j-cypher is an A simple Neo4j MCP server Affected versions of this package are vulnerable to Origin Validation Error via the lack of proper origin validation in the server's request handling. An attacker can execute unauthorized tool invocations against locally running instances ...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the Mojo process. An attacker can bypass site isolation protections by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.127 or higher. References -...
CVE-2024-13068
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-12973
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-13068
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-13068 Host Header Injection in Akinsoft's LimonDesk
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-13068
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-13068
CVE-2024-13068 describes an Origin Validation Error in Akinsoft LimonDesk that allows Forceful Browsing. Affected versions are s1.02.14 through before v1.02.17. The issue stems from improper origin validation, enabling access to restricted resources without proper authorization. CVSS v3.1 base sc...
PT-2025-35715
Name of the Vulnerable Software and Affected Versions: Akinsoft LimonDesk versions s1.02.14 through s1.02.16 Description: An origin validation error exists in Akinsoft LimonDesk, allowing for forceful browsing. Recommendations: Update Akinsoft LimonDesk to version 1.02.17 or later...
CVE-2024-12973
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973
CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...
CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
PT-2025-35549
Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through v1.11.00 Description: An origin validation error exists in Akinsoft OctoCloud, enabling HTTP response splitting. This issue is categorized as CAPEC - 87 - Forceful Browsing. Recommendations: Update...
Security Bulletin: A vulnerability in axios may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2024-57965)
Summary There is a vulnerability in axios used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8,...