4135 matches found
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.7.40 security update
Red Hat OpenShift Container Platform release 4.7.40 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which...
Critical: Red Hat Security Advisory: Red Hat AMQ Streams 1.8.4 release and security update
Red Hat AMQ Streams 1.8.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Moderate: Red Hat Security Advisory: Openshift Logging security and bug update (5.2.4)
An update is now available for OpenShift Logging 5.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...
KLA62329 ACE vulnerability in Microsoft Mariner
A spoofing vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-43896 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0 PowerShell CVE list CVE-2021-43896 high K...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update
An update for etcd is now available for Red Hat OpenStack Platform 16.1 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Critical: Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.9] Async #1
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base...
b2evolution Code Execution Vulnerability
b2evolution is a community content management system based on PHP and MySQL. A security vulnerability exists in b2evolution CMS v7.2.3, which can be exploited by an attacker to execute arbitrary code via the parameter cfqueryparam in the user login section...
Cross-site Scripting in django-wiki
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
GHSA-3M3H-V9HV-9J4H Cross-site Scripting in django-wiki
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
Important: Red Hat Security Advisory: kpatch-patch security update
An update is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Zomato: Race condition in User comments Likes
The researcher found a Race Condition to artificially inflate the upvotes of user comments in the Restaurant's review section...
CVE-2021-25986
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
CVE-2021-25986 Django-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
CVE-2021-25986 Django-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
CVE-2021-25986
The CVE-2021-25986 entry concerns Django-wiki versions 0.0.20 through 0.7.8, which are vulnerable to Stored Cross-Site Scripting (XSS) in the Notifications Section. The root cause is that an attacker who has edit access can inject a JavaScript payload into the page title; when victims receive a n...
CVE-2021-25986
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
PT-2021-16909
Name of the Vulnerable Software and Affected Versions Django-wiki versions 0.0.20 through 0.7.8 Description The issue concerns Stored Cross-Site Scripting XSS in the Notifications Section. An attacker with edit page access can inject a JavaScript payload in the title field. When a victim receives...
CVE-2021-25986: Improper Neutralization of Input During Web Page Generation
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...
