RHSA-2013:0259 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 security update

Bulletin has no description...

RHSA-2013:0230 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 security update

Bulletin has no description...

RHSA-2011:0945 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.1 update

Bulletin has no description...

RHSA-2010:0961 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.0 security and bug fix update

Bulletin has no description...

RHBA-2010:0735 Red Hat Bug Fix Advisory: JBoss Enterprise Web Platform 5.1.0 update

Bulletin has no description...

RHSA-2014:1833 Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update

Bulletin has no description...

RHSA-2014:1320 Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update

Bulletin has no description...

ROS-20240806-05

A vulnerability in the AbstractSessionListener component of the Symfony web application development and management platform is related to an incorrect authorization procedure. Symfony web application development and management platform is related to incorrect authorization procedure. Exploitation...

WordPress Path Traversal Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. WordPress suffers from a path traversal vulnerability that stems from improperly restricting pathnames to restricted directorie...

The vulnerability of the ASP.NET Zero web platform for creating websites lies in the redirection of URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the ASP.NET Zero web platform for creating websites involves the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

ZKTeco ZKBioSecurity 安全漏洞

ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBioSecurity version 6.1.1, which stems from a directory traversal vulnerability in eventRecord...

silverstripe/framework allows upload of dangerous file types

Some potentially dangerous file types exist in File.allowedextensions which could allow a malicious CMS user to upload files that then get executed in the security context of the website. We have removed the ability to upload .css, .js, .potm, .dotm, .xltm and .jar files in the default...

GHSA-F43J-8HQ4-2XJ9 silverstripe/framework uploaded PHP script execution in assets

A weakness in the .htaccess rules preventing requests to uploaded PHP scripts allows PHP scripts that had made their way into the assets directory to be successfully executed through the use of a specially crafted URL. There are protections in place to disallow upload of PHP scripts through the...

silverstripe/framework uploaded PHP script execution in assets

A weakness in the .htaccess rules preventing requests to uploaded PHP scripts allows PHP scripts that had made their way into the assets directory to be successfully executed through the use of a specially crafted URL. There are protections in place to disallow upload of PHP scripts through the...

CVE-2024-34082 Grav Arbitrary File Read to Account Takeover

Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - /grav/user/accounts/.yaml. This file stores hashed user password, 2FA secret, and the password res...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...

RHEL 6 : JBoss Enterprise Web Platform 5.1.2 update (Low) (RHSA-2011:1802)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1802 advisory. The Enterprise Web Platform is a slimmed down profile of the JBoss Enterprise Application Platform intended for mid-size workloads with light and ric...

RHEL 5 / 6 : JBoss Enterprise Web Platform 5.2.0 (RHSA-2013:0259)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:0259 advisory. - jbossws-cxf, apache-cxf: SOAPAction spoofing on document literal web services CVE-2012-3451 - jbossws-cxf, apache-cxf: Bypass of...

Trimble TM4Web 权限许可和访问控制问题漏洞

Trimble TM4Web is a virtual simulation platform from Trimble designed to help users create and deploy Web-based virtual reality VR and augmented reality AR applications. A privilege permission and access control issue vulnerability exists in Trimble TM4Web version 22.2.0 that stems from improper...

The vulnerability of the virtuoso-opensource web application development platform, related to writing beyond the buffer limit, allows a hacker to trigger a service failure.

The vulnerability of the virtuoso-opensource web application development platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger service failures using specially created SQL operators...