5222 matches found
Elastic Stack 7.17.4 and 8.2.1 Security Update
Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm ECDSA ESA-2022-06 A vulnerability CVE-2022-21449 affecting the implementation of Elliptic Curve Digital Signing Algorithm ECDSA based signatures verification in Java JDK versions 15 and later...
Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-43383)
Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have out-of-bounds read vulnerabilities that can be exploited by an attacker to execute arbitrary code in the...
PT-2022-37860
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used. An attacker could claim somebody else's account...
CVE-2022-24905
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on SSO is enabled. In order to exploit this vulnerability,...
CVE-2022-24905 Argo CD login screen allows message spoofing if SSO is enabled
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on SSO is enabled. In order to exploit this vulnerability,...
CVE-2022-24905
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on SSO is enabled. In order to exploit this vulnerability,...
PT-2022-16974 · Argo Cd · Argo Cd
Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.3.4 Argo CD versions prior to 2.2.9 Argo CD versions prior to 2.1.15 Description: A vulnerability was found in Argo CD that allows an attacker to spoof error messages on the login screen when single sign on SSO is...
CVE-2022-24905
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on SSO is enabled. In order to exploit this vulnerability,...
ArgoCD 输入验证错误漏洞
ArgoCD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...
CVE-2022-1731
Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...
Cisco node-jose improper validation of JWT signature
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON Web Tokens JWTs...
GHSA-4C39-HJ99-5H2R OXID eShop user impersonation vulnerability
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token...
OXID eShop user impersonation vulnerability
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token...
CVE-2022-28920
Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting XSS vulnerability via the function striptags...
CVE-2022-28920
Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting XSS vulnerability via the function striptags...
Cross site scripting
Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting XSS vulnerability via the function striptags...
CVE-2022-28920
Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting XSS vulnerability via the function striptags...
CVE-2022-28920
CVE-2022-28920 affects Tieba-Cloud-Sign v4.9. The vulnerability is a cross-site scripting (XSS) flaw discovered to be exploitable via the strip_tags function. The available sources describe the issue and confirm the product/version impacted, but do not provide exploit specifics, affected configur...