9035 matches found
PT-2025-43121
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the net/mlx5e component where the label mapping is not correctly released when replacing an existing connection tracking ct entry. This leads to a...
TouchDown Timesheet Tracking for Jira: Cross-site Scripting Vulnerabilities
TouchDown Timesheet Tracking for Jira is an easy-to-use timesheet reporting component from TouchDown, Switzerland. A security vulnerability exists in TouchDown Timesheet Tracking for Jira version 4.1.4, which stems from a stored cross-site scripting XSS vulnerability in the calendar view...
CVE-2022-44726: Improper Neutralization of Input During Web Page Generation
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
CVE-2022-44726 affects TouchDown Timesheet tracking component for Jira (version 4.1.4). The calendar view is vulnerable to stored XSS, enabling script execution in the context of affected pages. Public details in connected sources corroborate a calendar-view XSS risk; no concrete exploit details ...
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
Cross site scripting
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2022-43697
OX App Suite (Open-Xchange) prior to 7.10.6-rev30 is vulnerable to cross-site scripting via an activity tracking adapter defined by jslob. The root cause is an XSS flaw in how the adapter processes input, enabling injected scripts to run in the client when the affected interface is used. Affected...
PT-2023-14289 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for cross-site scripting XSS via an activity tracking adapter defined by jslob. This can potentially lead to malicious script execution on the client-side...
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2022-43697: Improper Neutralization of Input During Web Page Generation
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2023-29492
creationtimestamp| type| source ---|---|--- 2023-04-14 11:15:26+00:00| seen| MISP/6a1e78c5-1baf-4ae6-8ad7-959df8a51015 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:12+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971799 2025-02-23...
OpenCATS Cross-Site Scripting Vulnerability (CNVD-2023-29368)
OpenCATS is a leading open source applicant tracking system for recruiters and companies. A security vulnerability exists in OpenCats v0.9.7. An attacker could use the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the state parameter of...
Threat actors strive to cause Tax Day headaches
Threat actors often take advantage of current events and major news headlines to align attacks and leverage social engineering when people could be more likely to be distracted or misled. Tax season is particularly appealing to threat actors because not only are people busy and under stress, but ...
data-tracking (1.7.3) potentially affected by CVE-2023-28707 via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-28707 Source advisory: OSV:PYSEC-2023-3...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2023-28707 via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2023-28707 Source advisory: OSV:PYSEC-2023-3...
libnetfilter_conntrack bug fix and enhancement update
An update is available for libnetfilterconntrack. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnetfilterconntrack is a userspace library providing a...
