22152 matches found
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:F/RL:O/RC:C 8.2 Problem TYPO3 core component GeneralUtility::getIndpEnv uses the unfiltered server environment variable PATHINFO, which allows attackers to inject malicious content. In combination with the TypoScript setting...
plugin: CSRF vulnerability in Blue Ocean Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server...
TIBCO JasperReports Library 6.x < 6.3.5 / 6.4.1 / 6.4.2 / 6.4.21 / 7.1.0 / 7.2.0 Directory Traversal (CVE-2018-18809)
According to its self-reported version, the TIBCO JasperReports Library on the remote host is 6.x 6.3.5, 6.4.1, 6.4.2, 6.4.21, 7.1.0, or 7.2.0. It is, therefore, affected by a directory traversal vulnerability in the default server implementation that can allow web server users to access contents...
CVE-2022-40224
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2022-40224: Insufficient Resource Pool
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-31576
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB001232...
CVE-2022-34138
Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...
Information disclosure
Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...
CVE-2022-34138
CVE-2022-34138 describes an insecure direct object reference (IDOR) in the web server of Biltema IP and Baby Camera Software version v124. The vulnerability allows an attacker to access sensitive information via the product’s web server. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...
Joomla! 4.x < 4.2.7 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.2.7. It is, therefore, affected by multiple vulnerabilities. - A missing token check causes a CSRF vulnerability in the handling of post-installation messages. CVE-2023-23750 - A...
The vulnerability of the web server of the microprogrammed Ethernet switch Moxa SDS-3008 allows a intruder to trigger a service failure.
The vulnerability of the web server of the microprogrammed Ethernet switch Moxa SDS-3008 is related to insufficient resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted HTTP requests...
Fedora: Security Advisory for caddy (FEDORA-2023-322314ad50)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2023-13341
Name of the Vulnerable Software and Affected Versions Biltema IP and Baby Camera Software version v124 Description The issue concerns insecure direct object references IDOR in the web server, allowing attackers to access sensitive information. Recommendations For Biltema IP and Baby Camera Softwa...
CVE-2022-34138
Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...
CVE-2022-34138: Authorization Bypass Through User-Controlled Key
Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...
CVE-2022-34138
Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...
BILTEMA IP CAM 安全漏洞
BILTEMA IP CAM is a client for plug-and-play IP cameras from BILTEMA. A security vulnerability exists in BILTEMA IP CAM version v124, which originates from an insecure direct object reference in the web server. An attacker can exploit this vulnerability to access sensitive information...
Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting
...
