10832 matches found
GHSA-7JG2-JGV3-FMR4 Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR 52.8, Firefox 60 and...
GHSA-63QJ-P8GH-5XXX Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0
rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request...
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0
rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request...
GHSA-VHH3-MVC4-HHQ6 Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks
Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...
Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks
Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...
Siemens JT2GO和Siemens Teamcenter Visualization 代码问题漏洞
Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization contain a security vulnerability that can be exploited by attackers to The vulnerability can b...
CWA for Mac 2203: Random Session disconnects
CWA for Mac will disconnect a session at random. Auto connect-back will also fail. SSL connection error - "status 43" will be reported in Citrix Viewer logs | 03-16-2022 | 10:17:48.817 | 2724 | 5 | sslasock.c | 1359 | SSLDecryptPacket | TCTD | TTERROR | doDecryptData failed. status: 43 | 03-16-20...
Siemens JT2GO和Siemens Teamcenter Visualization 缓冲区错误漏洞
Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A security vulnerability exists in Siemens JT2Go and Teamcenter Visualization that can be exploited by an attacker to execute code in the context...
Siemens JT2GO和Siemens Teamcenter Visualization 资源管理错误漏洞
Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization are vulnerable and can be exploited by attackers to The vulnerability can be exploited to...
Siemens JT2GO和Siemens Teamcenter Visualization 输入验证错误漏洞
Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization contain a security vulnerability that can be exploited by attackers to The vulnerability can b...
Debian: Security Advisory (DLA-2998-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2998-1 : kicad - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2998 advisory. - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and...
virt-viewer bug fix and enhancement update
An update is available for virt-viewer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
virt-viewer bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
Fedora: Security Advisory for gerbv (FEDORA-2022-e819bd191f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
redis-commander (>=0.6.7, <=0.7.2) potentially affected by CVE-2022-30241 via jquery.json-viewer (1.4.0)
jquery.json-viewer NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.json-viewer and may be impacted: - redis-commander =0.6.7, =0.7.2 Source cves: CVE-2022-30241 Source advisory: OSV:GHSA-QP2Q-6H9J-JG2R...
GHSA-QP2Q-6H9J-JG2R Cross-site Scripting in jquery.json-viewer
The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...
CVE-2022-30241
The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...
