192 matches found
Plesk Cross-Site Request Forgery Vulnerability (CNVD-2022-91163)
Plesk is a hosting control panel from the Swiss company Plesk. version 18.0.37 of Plesk is vulnerable to cross-site request forgery, which stems from the software's lack of validation of cross-site request forgery tokens. An attacker could exploit this vulnerability to insert data in the user and...
Magnolia CMS has an unspecified vulnerability (CNVD-2022-13381)
Magnolia CMS is an application of the Swiss company Magnolia. Magnolia CMS, a website building framework, is provided with a security vulnerability that can be exploited by attackers to bypass security restrictions and execute arbitrary code via a carefully crafted Freemark load...
Magnolia CMS has an unspecified vulnerability (CNVD-2022-13385)
Magnolia CMS is an application of the Swiss company Magnolia. Magnolia CMS, a website building framework, is provided with a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted CSV XLS file...
Magnolia CMS has an unspecified vulnerability
Magnolia CMS is an application from the Swiss company Magnolia. provides a website building framework Magnolia CMS has a security vulnerability that can be exploited by attackers to cause Open Redirect vulnerabilities and Cross Site Request Forgery CSRF to brute force and exfiltrate user...
Magnolia CMS has an unspecified vulnerability (CNVD-2022-13382)
Magnolia CMS is an application of the Swiss company Magnolia. Magnolia CMS, a website building framework, is provided with a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted YAML file...
Knime Analytics Platform code issue vulnerability
Knime Analytics Platform is a free open source data analysis, reporting and integration platform from the Swiss company Knime.KNIME Analytics Platform versions prior to 4.5.0 contain a code issue vulnerability that can be exploited by attackers to conduct XXE attacks via crafted workflow files...
KNIME directory traversal vulnerability
A directory traversal vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from a failure of a networked system or product to properly filter special elements in a resource or file path, which could be exploited by ...
Business-Dna Solution GmbH TopEase Cross-Site Scripting Vulnerability
Business-Dna Solution GmbH TopEase is a "transformational risk" solution from the Swiss company Business-Dna Solution GmbH. A cross-site scripting vulnerability exists in Business-Dna Solution GmbH TopEase, which can be exploited by attackers to inject arbitrary HTML and JavaScript into object...
Business-Dna Solution GmbH TopEase Input Validation Error Vulnerability
Business-Dna Solution GmbH TopEase is a "transformation risk" solution from the Swiss company Business-Dna Solution GmbH. Business-Dna Solution GmbH TopEase is vulnerable to an input validation error that could be exploited to insert arbitrarily long strings and eventually exhaust the underlying...
swissqrreader.ch Improper Access Control vulnerability OBB-2207706
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Have You Checked the New Kubernetes RBAC Swiss Army Knife?
Kubernetes Role-Based Access Control RBAC is a method of regulating access to computer or network resources based on the roles of individual users within your organization. RBAC authorization uses the rbac.authorization.k8s.io API group to drive authorization decisions, allowing you to dynamicall...
ProtonMail Now Keeps IP Logs
After being compelled by a Swiss court to monitor IP logs for a particular user, ProtonMail no longer claims that "we do not keep any IP logs." EDITED TO ADD 9/14: This seems to be more complicated. ProtonMail is not yet saying that they keep logs. Their privacy policy still states that they do n...
Ribbonsoft dxflib code execution vulnerability
Ribbonsoft dxflib is an open source C library from the Swiss company Ribbonsoft, mainly used for parsing DXF TM files.Ribbonsoft dxflib suffers from a code execution vulnerability, which can be exploited by attackers to provide malicious files to trigger the vulnerability...
ProtonMail logged, shared activist’s IP address with Swiss police
By Waqas ProtonMail is being criticized for sharing French activists IP address with Swiss authorities while claiming it does not save logs. End-to-end encrypted email service provider ProtonMail is currently facing criticism after the company shared the IP address of an anti-gentrification...
ProtonMail Logs Activist's IP Address With Authorities After Swiss Court Order
End-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in France. The Switzerland-based company said it received a "legally...
swiss-gear.dostavka2.me Cross Site Scripting vulnerability OBB-2123518
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
TYPO3 Information Disclosure Vulnerability (CNVD-2022-17979)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 has an information disclosure vulnerability that could be exploited by an attacker to obtain all application registration data...
TYPO3 SQL Injection Vulnerability (CNVD-2022-17982)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 Newsletter is vulnerable to SQL injection, which stems from vulnerability to SQL injection when processing returned emails. No detailed vulnerability details are currently...
TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17985)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 has a cross-site scripting vulnerability that stems from the fact that when the Page TSconfig settings are not coded correctly, the corresponding page preview module Web＞View i...
TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17986)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 suffers from a cross-site scripting vulnerability that stems from the fact that the QueryGenerator and QueryView components are vulnerable to reflected and persistent cross-sit...