CVE-2022-45868

CVE-2022-45868 affects H2 Database Engine prior to 2.2.220. The web-based admin console can be started from the CLI with the -webAdminPassword argument, allowing the password to be passed in cleartext and discovered by a local user or someone with local access by listing processes and their argum...

CVE-2022-45868

The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user or an attacker that has obtained local access through...

CVE-2022-45868

The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user or an attacker that has obtained local access through...

FeehiCMS Cross-Site Scripting Vulnerability (CNVD-2022-78143)

FeehiCMS is a Php-based CMS website builder for individual developers. feehiCMS version v2.1.1 has a security vulnerability that originates from an id parameter on /web/admin/index.php?r=log/view-layer found to contain a reflective cross-site scripting XSS vulnerability. No detailed vulnerability...

FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

GHSA-3PPM-FWHM-QQG6 FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

Security Bulletin: IBM Tivoli Directory Server Cross-Site scripting vulnerability with the Web Admin Tool (CVE-2012-0740)

Abstract IBM Tivoli Directory Server is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Web Admin Tool. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0740 DESCRIPTION: IBM Tivoli Directory Server TDS is vulnerable to cross-site scripting, caused b...

Sophos Firewall 代码注入漏洞

Sophos Firewall is a firewall from Sophos UK. A code execution vulnerability exists in Sophos Firewall 19.0.1 and prior versions, which fails to properly filter special elements of constructed snippets in User Portal and Webadmin. An attacker can exploit the vulnerability to cause arbitrary code...

CVE-2022-27561

There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin LotusTraveler.nsf...

CVE-2022-27561

CVE-2022-27561 describes a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf). The connected sources confirm the affected component is LotusTraveler.nsf within HCL Traveler and identify the vulnerability as reflected XSS. No concrete exploitation detail...

PT-2022-18485 · Hcl · Hcl Traveler

Name of the Vulnerable Software and Affected Versions: HCL Traveler affected versions not specified Description: There is a reflected Cross-Site Scripting issue in the HCL Traveler web admin, specifically affecting the LotusTraveler.nsf component. Recommendations: At the moment, there is no...

CVE-2022-2338

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may...

Malicious Package

Overview timebase-web-admin is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

MAL-2022-6574 Malicious code in timebase-web-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e87a33516df57c86ba7066cdc4d7dfce0e1c02576264b094786f103dba29606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in timebase-web-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e87a33516df57c86ba7066cdc4d7dfce0e1c02576264b094786f103dba29606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-27656

CVE-2022-27656 affects SAP Web Dispatcher Web Administration UI and the Internet Communication Manager (ICM). It stems from insufficient encoding of user‑controlled inputs, enabling Cross‑Site Scripting (XSS). CVSS v3.1 base score 6.1 (MEDIUM); vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. No exp...

(Pwn2Own) Lexmark MC3224i pagemaker Insufficient Session Expiration Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the remote...

Fedora: Security Advisory for phpMyAdmin (FEDORA-2022-3544c7d20e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...