CVE-2022-40626

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend...

CVE-2022-40626

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend...

UBUNTU-CVE-2022-40626

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend...

CVE-2022-40626

CVE-2022-40626 is a reflected XSS vulnerability in Zabbix Frontend. An unauthenticated user can craft a link with JavaScript in the backurl parameter and send it to authenticated users, enabling creation of a fake account with predefined login, password and role. Affected software: Zabbix Fronten...

NOKIA 1350 OMS 操作系统命令注入漏洞

NOKIA 1350 OMS is an optical management system from Nokia Finland. An operating system command injection vulnerability exists in NOKIA 1350 OMS version R14.2 that originates from allowing an unauthenticated user to execute commands on the operating system...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

Authorization

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload

The plugin does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file PoC POST /wp-admin/admin-ajax.php...

CVE-2022-21941

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...

Command injection

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...

CVE-2022-21941 iSTAR Ultra

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

Denial of service

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27563 Overload/denial of service affects HCL VersionVault Express

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27563

CVE-2022-27563 affects HCL VersionVault Express. An unauthenticated attacker can overload a section of VersionVault Express, producing a denial-of-service condition. Public references in the dataset cite affected versions (e.g., HCL VersionVault Express 2.0.1/2.1.0 in CNVD) and describe the impac...

PT-2022-18486 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Recommendations: At the moment, there is no information about a newer...

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

Cross site scripting

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...

CVE-2022-35654

CVE-2022-35654 affects Pegasystem PEGA Platform (versions 8.5.4–8.7.3). The issue is an unauthenticated cross-site scripting (XSS) vulnerability triggered via the redirect parameter. Red Hat and other sources corroborate the XSS finding; public details specify impacted versions and the vulnerable...