10377 matches found
terribilisstudio.fr Cross Site Scripting vulnerability OBB-2931777
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Oracle Linux 9 : .NET / 6.0 (ELSA-2022-6521)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6521 advisory. 6.0.109-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.109-1 - Update to .NET SDK 6.0.109 and Runtime 6.0.9 -...
Oracle Linux 8 : .NET / 6.0 (ELSA-2022-6539)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6539 advisory. 6.0.109-1.0.1 - Add missing Oracle RIDs 6.0.109-1 - Update to .NET SDK 6.0.109 and Runtime 6.0.9 - Resolves: RHBZ2123789 Tenable has extracted the preceding...
Security Updates for Microsoft Visual Studio Products (Sep 2022)
A denial of service DoS vulnerability exists in Visual Studio. An authenticated, remote attacker can exploit this issue, to cause the system to stop responding. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
GHSA-2JV3-V37P-65W3 CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CrafterCMS OS Command Injection vulnerability
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...
CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
GHSA-J6X3-3JQQ-M922 CrafterCMS OS Command Injection vulnerability
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...
Security Update for Microsoft Visual Studio Code (September 2022)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.17.1 It is, therefore, affected by privilege escalation vulnerability. An authenticated, local attacker can exploit this to escalate their privileges of an affected system to that of another user of Visual Stud...
Microsoft Visual Studio Denial of Service Vulnerability (Sep 2022) - Mac OS X
The host is missing an important security update according to Microsoft Visual Studio September 2022 update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
The vulnerability of the software products for developing HMI/SCADA systems such as EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio lies in the ability to restore unreliable data from memory, allowing an attacker to execute arbitrary code.
The vulnerability of the software products for developing HMI/SCADA systems such as EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio lies in the ability to restore unreliable data in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2022-32555
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...
Cross site request forgery (csrf)
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...
CVE-2022-32555
Unisys Data Exchange Management Studio is affected by CVE-2022-32555 due to the absence of an Anti‑CSRF token on POST requests, enabling potential CSRF. Affected versions are prior to 6.0.IC2 and 7.x prior to 7.0.IC1. Root cause: missing Anti‑CSRF protection. Impact: cross‑site forgery could perf...
CVE-2022-32555
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...
