917 matches found
PT-2023-24941 · WordPress · Ultimate Member
Name of the Vulnerable Software and Affected Versions: Ultimate Member WordPress plugin versions prior to 2.6.7 Description: The issue allows attackers to create user accounts with arbitrary capabilities, effectively enabling them to create administrator accounts at will. This is being actively...
XWiki Platform 跨站脚本漏洞
XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A cross-site scripting vulnerability exists in XWiki Platform, which stems from. Affected products and versions: XWiki Platform 2.6 RC2 and earlier, 2.7 RC1 and earlier...
PT-2023-25312 · Openbsd +2 · Openbsd +2
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 7.2 before errata 026 OpenBSD versions 7.3 before errata 004 LibreSSL versions prior to 3.6.3 LibreSSL versions 3.7.x prior to 3.7.3 Description: A double free or use after free could occur after SSL clear. This issue does no...
PT-2023-25167 · Digital.Ai +1 · Jenkins Digital.Ai App Management Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Digital.ai App Management Publisher Plugin versions 2.6 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins. The...
CVE-2023-23481
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
Vulnerabilities fixed in IBM Aspera Connect and Aspera Cargo
IBM has fixed vulnerabilities in Aspera Connect and Aspera Cargo. A malicious party could exploit the vulnerabilities to access gain access to login credentials, or to be able to execute arbitrary code execute with application privileges. IBM has released updates to fix the vulnerabilities in...
Rancher Labs Rancher 跨站脚本漏洞
Rancher Labs Rancher is a suite of open source, enterprise-grade container management platforms from Rancher Labs, Inc. in the United States. Rancher Labs Rancher versions prior to 2.6.0 through 2.6.13 and 2.7.0 through 2.7.4. A cross-site scripting vulnerability exists that stems from the presen...
PT-2023-14315 · Rancher · Rancher
Name of the Vulnerable Software and Affected Versions: Rancher versions 2.6.0 through 2.6.12 Rancher versions 2.7.0 through 2.7.3 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue allows users in higher-privileged groups to inject code execut...
WordPress plugin Otter 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in the WordPress...
J2eeFAST 跨站脚本漏洞
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free backend framework platform . A cross-site scripting vulnerability exists in J2eeFAST version 2.6.0 and earlier versions. An attacker can exploit this...
DEBIAN-CVE-2023-31485
GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks...
CVE-2023-29815
mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...
PT-2023-23360 · Gitlab +1 · Gitlab::Api::V4 +1
Name of the Vulnerable Software and Affected Versions: GitLab::API::v4 versions 0.26 and earlier Description: The issue allows for machine-in-the-middle attacks due to the lack of TLS certificate verification when connecting to a GitLab server. Recommendations: For GitLab::API::v4 versions 0.26 a...
mccms SQL注入漏洞
mccms Man City CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in version 2.6 of mccms, which stems from the presence of a SQL injection vulnerability that allows remote attackers to run arbitrary SQL commands...
mccms 跨站请求伪造漏洞
mccms diffuse city CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.6.3. An attacker exploited the vulnerability to perform cross-site request forgery CSRF attacks...
PT-2023-18671 · Rapid7 · Rapid7 Insight Agent
Name of the Vulnerable Software and Affected Versions: Rapid7 Insight Agent versions 3.2.6 and below Description: The issue is related to a Directory Traversal vulnerability. Unsantized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path, potentially allowing an...
CVE-2022-26418
creationtimestamp| type| source ---|---|--- 2023-03-08 02:23:31+00:00| seen| https://t.me/cibsecurity/59655...
Apache Sling 安全漏洞
Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. It is designed to create content-centric applications on JSR-170 compliant content repositories such as Apache Jackrabbit. A security vulnerability exists in Apache Sling versions prior to...
CLSA-2023-1676571549 Update of nss
Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "EC-ACC" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" -...
