640 matches found
USN-4995-1 thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, spoof the UI, bypass security restrictions, or...
CVE-2019-25047
Greenbone Security Assistant GSA before 8.0.2 and Greenbone OS GOS before 5.0.10 allow XSS during 404 URL handling in gsad...
Cross site scripting
Greenbone Security Assistant GSA before 8.0.2 and Greenbone OS GOS before 5.0.10 allow XSS during 404 URL handling in gsad...
CVE-2019-25047
Greenbone Security Assistant GSA before 8.0.2 and Greenbone OS GOS before 5.0.10 allow XSS during 404 URL handling in gsad...
CVE-2019-25047
CVE-2019-25047 affects Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10. The flaw is an XSS in 404 URL handling in gsad. Exploitation context and impact are stated as cross-site scripting in affected web interfaces; patch versions have been released: GSA 8.0.2 ...
Greenbone Security Assistant 跨站脚本漏洞
Greenbone Security Assistant GSA is a web interface.Greenbone Security Assistant is a web interface developed for the Greenbone Security Manager appliance. A cross-site scripting vulnerability exists in Greenbone Security Assistant GSA versions prior to 8.0.2 and Greenbone OS GOS versions prior t...
Bosch IP cameras cross-site scripting vulnerability (CNVD-2021-53971)
Bosch IP cameras is a German webcam device.A cross-site scripting vulnerability exists in Bosch IP cameras URL handling, which could be exploited by attackers to inject malicious script or HTML code that could capture sensitive information or hijack user sessions when malicious data is viewed...
Critical Bug in VMWare Carbon Black Allows Takeover
A critical security vulnerability in the VMware Carbon Black Cloud Workload appliance would allow privilege escalation and the ability to take over the administrative rights for the solution. The bug CVE-2021-21982 ranks 9.1 out of 10 on the CVSS vulnerability-severity scale. The VMware Carbon...
VMware Carbon Black Cloud Workload appliance update addresses incorrect URL handling vulnerability (CVE-2021-21982)
3. Advisory Details A URL on the administrative interface of the VMware Carbon Black Cloud Workload appliance can be manipulated to bypass authentication. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1...
CVE-2021-28117
CVE-2021-28117 affects KDE Discover: libdiscover/backends/KNSBackend/KNSResource.cpp in Discover prior to 5.21.3. The issue: it automatically creates links to potentially dangerous URLs that are neither http:// nor https:// based on content from store.kde.org. Fixed versions cited include 5.21.3 ...
USN-4774-1 libspring-java vulnerabilities
Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a crafted XML file to cause a denial of service. CVE-2015-3192 Alvaro Muñoz discovered that Spring Framework incorrectly handled certain URLs. A remote attacker could...
USN-4774-1: Spring Framework vulnerabilities
Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a crafted XML file to cause a denial of service. CVE-2015-3192 Alvaro Muñoz discovered that Spring Framework incorrectly handled certain URLs. A remote attacker could...
CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...
CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...
Remote code execution
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...
UBUNTU-CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...
CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...
CVE-2021-22191
CVE-2021-22191 affects Wireshark up to versions 3.4.3 and 3.2.11 (pre-release fix), with vulnerability described as improper URL handling that can enable remote code execution via crafted packets or capture files. The root cause, as reported in connected sources, involves how certain URL fields i...
