53 matches found
CVE-2022-2720
creationtimestamp| type| source ---|---|--- 2022-10-12 12:40:50+00:00| seen| https://t.me/cibsecurity/51256...
CVE-2022-26114
An improper neutralization of input during web page generation vulnerability CWE-79 in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending specially crafted mail messages...
Liferay Portal 操作系统命令注入漏洞
Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. An operating system command injection vulnerability exists...
Vtiger CRM 跨站脚本漏洞
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a cross-site scripting vulnerability th...
PT-2021-11668 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server and Data Center versions prior to 7.2.0 Description: The issue allows remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the avatar upload feature. Recommendation...
Atlassian Confluence Server Code Issue Vulnerability
Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server versions prior to 7.2.0 that could...
IBM QRadar Improper Access Control Vulnerability (CNVD-2020-46811)
IBM QRadar is an enterprise security information and event management SIEM product that detects anomalies, finds advanced threats, and eliminates false positives. A security vulnerability exists in IBM QRadar Wincollect versions 7.2.0 through 7.2.9, which stems from a program that allows users to...
IBM QRadar Improper Access Control Vulnerability
IBM QRadar is an enterprise security information and event management SIEM product that detects anomalies, finds advanced threats, and eliminates false positives. A security vulnerability exists in IBM QRadar Wincollect versions 7.2.0 through 7.2.9 that stems from WinCollect failing to install...
jackson-mapper-asl: XML external entity similar to CVE-2016-3720
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries such that an XML external entity XXE vulnerability affects codehaus's jackson-mapper-asl libraries. This vulnerability is similar to CVE-2016-3720. The primary threat from this flaw is data integrity...
CVE-2016-10309
In the GUI of Ceragon FibeAir IP-10 before 7.2.0 devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser...
File Replication Pro Remote Command Execution Vulnerability
File Replication Pro is a file management solution for backing up, copying files from different network nodes. A remote command execution vulnerability exists in File Replication Pro 7.2.0 and earlier versions. An attacker can exploit the vulnerability to remotely execute arbitrary commands as th...
IBM DataPower Gateways GatewayScript Module Information Disclosure Vulnerability
IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads, which protects, integrates, and optimizes access across channels...
