19878 matches found
CVE-2022-30578
The CVE-2022-30578 vulnerability affects the Web Server component of TIBCO EBX Add-ons, with versions 5.4.1 and earlier being vulnerable. The issue enables a stored XSS condition that an attacker with network access and low privileges can trigger, requiring user interaction for exploitation. A fi...
CVE-2022-30578 TIBCO EBX Add-ons Stored XSS vulnerability
The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using this vulnerability requires human...
CVE-2022-30577 TIBCO EBX Stored XSS vulnerability
The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using this vulnerability requires human...
CVE-2022-30577
The CVE-2022-30577 entry concerns TIBCO EBX, where the Web Server component on versions 6.0.0–6.0.8 is vulnerable to Stored XSS. The root cause details are not explicitly provided in the supplied documents, but the vulnerability is described as easily exploitable with network access and requires ...
Apache Airflow 输入验证错误漏洞
Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow versions 2.3.0 to 2.3.4 have an open redirection vulnerability, which originates from the /confirm port of the web server does not do a reasonable job on the target...
The vulnerability of the WSGI server for Python Waitress, related to HTTP request processing flaws, allows attackers to compromise data integrity.
The vulnerability of the WSGI server for Python Waitress is related to the uncertainty in recognizing a single LF character as a line feed. Exploiting this vulnerability allows an attacker to compromise data integrity...
The vulnerability of the HTTP Daemon server relates to inconsistent interpretation of HTTP requests, allowing attackers to exploit their privileges.
The vulnerability of the HTTP Daemon is related to the inconsistent interpretation of HTTP requests when processing the 'Content-Length' header value. Exploiting this vulnerability allows a remote attacker to enhance their privileges by sending specially crafted hidden HTTP requests HTTP Request...
CVE-2022-40075
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...
CVE-2022-40067
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer...
CVE-2022-40074
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi...
CVE-2022-40068
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand...
Tenda AC21 缓冲区错误漏洞
The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which stems from the lack of length checking of input data in the fromSetWifiGusetBasic function of /bin/httpd, which can be exploited to cause httpd to...
PT-2022-25185 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability via /bin/httpd, specifically affecting the formSetDeviceName. Recommendations: For Tenda AC21 version 16.03.08.15, consider disabling access t...
Tenda AC21 缓冲区错误漏洞
The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which originates from a lack of length checking of input data in the formSetFirewallCfg function of /bin/httpd, which can be exploited to cause httpd to...
CVE-2022-38829
Tenda RX9Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg...
CVE-2022-2863
The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...
TIBCO Security Advisory: September 21, 2022 - TIBCO EBX Add-ons -CVE-2022-30578
TIBCO EBX Add-ons Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30578 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX Add-ons versions 5.4.1 and below The following component is affected: Web Server Description The component listed above...
TIBCO Security Advisory: September 21, 2022 - TIBCO EBX -CVE-2022-30577
TIBCO EBX Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30577 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX versions 6.0.0 through 6.0.8 The following component is affected: Web Server Description The component listed above contains an easil...
TIBCO Security Advisory: September 21, 2022 - TIBCO EBX -CVE-2022-30577
TIBCO EBX Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30577 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX versions 6.0.0 through 6.0.8 The following component is affected: Web Server Description The component listed above contains an easil...