CVE-2021-32962 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-32964 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system...

CVE-2021-32964

The CVE-2021-32964 issue affects AGG Software Web Server versions 4.0.40.1014 and earlier, enabling a path traversal vulnerability that may allow an attacker to read arbitrary files from the file system. Public sources confirm the affected product and vulnerability class (path traversal, CWE-23),...

GHSA-922H-8Q8G-W7FX Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin

A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server...

Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin

A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server...

GHSA-WWRR-4JP4-58WG CSRF vulnerability in Jenkins Mantis Plugin

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...

CSRF vulnerability in Jenkins Mantis Plugin

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...

Jenkins RapidDeploy Plugin missing permission check

A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents...

Dolibarr ERP and CRM Code Injection

Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the sam...

GHSA-JWG3-V9XM-V6Q9 Dolibarr ERP and CRM Code Injection

Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the sam...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

PT-2022-10165 · Agg · Agg Software Web Server

Name of the Vulnerable Software and Affected Versions: AGG Software Web Server versions 4.0.40.1014 and prior Description: The issue allows an attacker to perform a path traversal attack, potentially enabling them to read arbitrary files from the file system. Recommendations: For AGG Software Web...

CVE-2021-32964: Relative Path Traversal

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system...

CVE-2021-32962: Improper Neutralization of Input During Web Page Generation

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 V1.0 V15.03.02.196318 and AC9 V3.0 V15.03.06.42multi versions, which originates from a buffer overflow issue in the web server httpd. When setting up a virtual service, the httpd program will crash and...

PT-2022-10164

Name of the Vulnerable Software and Affected Versions AGG Software Web Server versions 4.0.40.1014 and prior Description The issue allows an attacker to remotely execute arbitrary code through cross-site scripting. Recommendations For AGG Software Web Server versions 4.0.40.1014 and prior, at the...

CVE-2020-24916

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection...

CVE-2018-10857

git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN...