28 matches found
SUSE go 注入漏洞
SUSE go is an expressive, concurrent, garbage-collecting general purpose/systems programming language from SUSE, Germany. A security vulnerability exists in SUSE go version 1.20 that stems from improper handling of empty HTML attributes...
JetBrains Toolbox 安全漏洞
JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A security vulnerability exists in JetBrains Toolbox App versions prior to 1.28. An attacker exploited the vulnerability to perform a DYLIB injection attack...
PT-2022-13632 · Softing · Softing Secure Integration Server
Name of the Vulnerable Software and Affected Versions: Softing Secure Integration Server version V1.22 Description: A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a large content-length header. This issue affects the Softing Secure Integration...
Vulnerability fixed in Cacti
A vulnerability has been fixed in Cacti. The vulnerability allows a remote malicious person to bypass authentication when using LDAP to authenticate. The developers of Cacti have fixed the vulnerability in version v.1.20. For more information, see:...
PT-2019-11744 · Jenkins · Jenkins Configuration As Code Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Configuration as Code Plugin versions 1.20 and earlier Jenkins Configuration as Code Plugin versions prior to 1.25 Description: The issue concerns the handling of the proxy password in the Jenkins Configuration as Code Plugin...
CVE-2017-8976
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...
CVE-2017-8977
A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...
PT-2015-4258 · D Link · D-Link Dcs-2103
Name of the Vulnerable Software and Affected Versions: D-link IP camera DCS-2103 versions prior to 1.20 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING to "vb.htm". Recommendations: For versions prior to 1.20, updat...