13027 matches found
BIT-JASPERREPORTS-2022-41561
The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...
BIT-DRUPAL-2021-41182 XSS in the `altField` option of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...
BIT-DRUPAL-2021-41183 XSS in `*Text` options of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...
BIT-DRUPAL-2021-41184 XSS in the `of` option of the `.position()` util
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the of option of the .position util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the of option is now treated as a CSS...
BIT-GRAFANA-2023-1387
Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...
BIT-COUCHDB-2023-26268 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes
Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions: validatedocupdate list filter filter views using view functions as filters rewrite update This doesn't affect map/reduce or searc...
BIT-COUCHDB-2023-45725 Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2024-1989
creationtimestamp| type| source ---|---|--- 2024-03-06 07:26:46+00:00| seen| https://t.me/ctinow/201063 2024-03-06 07:31:12+00:00| seen| https://t.me/ctinow/201067...
CVE-2024-1771
creationtimestamp| type| source ---|---|--- 2024-03-06 07:26:45+00:00| seen| https://t.me/ctinow/201062 2024-03-06 07:31:11+00:00| seen| https://t.me/ctinow/201066...
CVE-2024-24766
creationtimestamp| type| source ---|---|--- 2024-03-06 02:43:54+00:00| published-proof-of-concept| https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-c967-2652-gfjm 2024-03-06 20:26:45+00:00| seen| https://t.me/ctinow/201756 2024-03-06 20:36:15+00:00| seen|...
CVE-2023-49977
creationtimestamp| type| source ---|---|--- 2024-03-06 02:26:50+00:00| seen| https://t.me/ctinow/200948 2024-03-06 02:26:59+00:00| seen| https://t.me/ctinow/200955...
CVE-2023-49971
creationtimestamp| type| source ---|---|--- 2024-03-06 02:26:45+00:00| seen| https://t.me/ctinow/200944 2024-03-06 02:26:52+00:00| seen| https://t.me/ctinow/200951...
CVE-2024-25817
creationtimestamp| type| source ---|---|--- 2024-03-06 01:26:17+00:00| seen| https://t.me/ctinow/200916 2024-03-06 01:26:27+00:00| seen| https://t.me/ctinow/200923...
CVE-2024-24784
creationtimestamp| type| source ---|---|--- 2024-03-06 00:26:47+00:00| seen| https://t.me/ctinow/200860 2024-03-06 04:41:48+00:00| seen| https://t.me/ctinow/200994...
Amazon Linux 2 : openssl-snapsafe (ALASOPENSSL-SNAPSAFE-2024-005)
The version of openssl-snapsafe installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2OPENSSL-SNAPSAFE-2024-005 advisory. Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of...
CVE-2024-1900
creationtimestamp| type| source ---|---|--- 2024-03-05 23:26:44+00:00| seen| https://t.me/ctinow/200816 2024-03-05 23:26:49+00:00| seen| https://t.me/ctinow/200821...
CVE-2024-1898
creationtimestamp| type| source ---|---|--- 2024-03-05 23:26:43+00:00| seen| https://t.me/ctinow/200815 2024-03-05 23:26:48+00:00| seen| https://t.me/ctinow/200820...
CVE-2024-25613
creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:20+00:00| seen| https://t.me/ctinow/200756 2024-03-05 22:32:11+00:00| seen| https://t.me/ctinow/200766...