5644 matches found
Duplicate Advisory: Arbitrary code execution in jfinal CMS
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qhm-ch8h-xgjr. This link is maintained to preserve external references. Original Description Command execution vulnerability in the ActionEnter Class ins jfinal CMS version 5.1.0 allows attackers to execute...
GHSA-GH24-C683-79R2 Duplicate Advisory: Arbitrary code execution in jfinal CMS
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qhm-ch8h-xgjr. This link is maintained to preserve external references. Original Description Command execution vulnerability in the ActionEnter Class ins jfinal CMS version 5.1.0 allows attackers to execute...
PT-2023-20805 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: jfinal CMS version 5.1.0 Description: A command execution issue in the ActionEnter Class of jfinal CMS allows attackers to execute arbitrary code via a created json file to the ueditor route. Recommendations: For jfinal CMS version 5.1.0,...
PT-2023-12783 · Drupal · Drupal
Name of the Vulnerable Software and Affected Versions: Drupal versions prior to the fixed version Description: The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances,...
CVE-2022-25276: Improper Neutralization of Input During Web Page Generation
The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities...
CVE-2022-25276
The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities...
CVE-2023-28980
A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...
Design/Logic Flaw
An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash,...
CVE-2023-28970
Technical details about CVE-2023-28970 are not publicly available in the provided connected documents. Monitor for updates; no new information on affected versions, root cause specifics, exploitation status, or remediation is present here.
nmstate bug fix and enhancement update
An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...
@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2023-26116 via angular-route (>=1.2.17-build.163.1, <=1.5.11)
angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...
@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2023-26116 via angular-route (>=1.6.1, <=1.8.3)
angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...
@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2023-26118 via angular-route (>=1.2.17-build.163.1, <=1.5.11)
angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...
@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2023-26118 via angular-route (>=1.6.1, <=1.8.3)
angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2023-26118 Source advisory: MEND:CVE-2023-26118...
@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2023-26117 via angular-route (>=1.6.1, <=1.8.3)
angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...
@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2023-26117 via angular-route (>=1.2.17-build.163.1, <=1.5.11)
angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...
CVE-2022-43624
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2022-43627
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
Consul Server Panic when Ingress and API Gateways Configured with Peering Connections
A vulnerability was identified in Consul and Consul Enterprise “Consul” an authenticated user with service:write permissions could trigger a workflow that causes Consul server and client agents to crash under certain circumstances. To exploit this vulnerability, an attacker requires access to an...
