Cyclos 4 PRO 跨站脚本漏洞

Cyclos 4 PRO is a web server. A cross-site scripting vulnerability exists in Cyclos 4 PRO version 4.14.7 and earlier, which can be exploited by remote attackers to inject arbitrary web scripts or HTML via the groupId parameter...

RHEL 7 / 8 : Red Hat JBoss Web Server 5.6.2 Security Update (Important) (RHSA-2022:1519)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1519 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache...

NanoHTTPD 安全漏洞

NanoHTTPD is a lightweight HTTP server designed to be embedded in other applications, released under a modified BSD license. An information disclosure vulnerability exists in all versions of the NanoHTTPD package. The vulnerability stems from the fact that when an HTTP request body is parsed in a...

CVE-2022-28994

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

CVE-2022-28994

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

CVE-2022-29818

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29818

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29817

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

CVE-2022-29817

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

CVE-2022-29817

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

Cross site scripting

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

Code injection

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29818

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29818

CVE-2022-29818 affects JetBrains IntelliJ IDEA prior to 2022.1. The issue is flawed origin checks in the internal web server, resulting in an access control error. Public details in connected sources describe it as an access control vulnerability, with no further exploit specifics or remediation ...

CVE-2022-29817

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

CVE-2022-29817

JetBrains IntelliJ IDEA before 2022.1 is affected by a reflected XSS vulnerability in the internal web server, triggered by error messages. The issue allows execution of JavaScript on the client; CVSS context is provided in the sources, but the documents do not specify a patch version or remediat...

PT-2022-19850

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for reflected XSS via error messages in the internal web server. This means an attacker could potentially inject malicious code into the error messages, which would...

PT-2022-19851

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue is related to flawed origin checks in the internal web server of JetBrains IntelliJ IDEA. This flaw could potentially be exploited. Recommendations For versions prior to...

CVE-2022-29818: Origin Validation Error

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29817: Improper Neutralization of Input During Web Page Generation

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...