VulnCheck KEV: CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

FreeBSD : opengrok -- Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. (1135e939-62b4-11ec-b8e2-1c1b0d9ea7e6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1135e939-62b4-11ec-b8e2-1c1b0d9ea7e6 advisory. - Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily...

DEBIAN-CVE-2023-5858

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Low...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-werkzeug, airflow, airflow-core, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-werkzeug, airflow, airflow-core, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

tomcat: Open Redirect vulnerability in FORM authentication

A flaw was found in Apache Tomcat if the default web application is configured with FormAuthenticator. This issue allows a specially crafted URL to trigger a redirect to an arbitrary URL...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1, request-1276, py3-pipenv, jwt-tool, k8s-sidecar, py3-cassandra-medusa, py3.13-scanner-test-libraries, az, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

CVE-2023-45803 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1, request-1276, py3-pipenv, jwt-tool, k8s-sidecar, py3-cassandra-medusa, py3.13-scanner-test-libraries, az, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

CVE-2023-45803 vulnerabilities

Vulnerabilities for packages: py3-pipenv, jwt-tool, kubeflow-katib, py3-tensorflow-serving-api, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, py3-cassandra-medusa, az...

CVE-2023-45674

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

Sql injection

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

FarmBot Web App SQL Injection Vulnerability

FarmBot Web App is a web application. FarmBot Web App prior to version 15.8.4 suffers from an SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that could allow an authenticated attacker to extract arbitrary data from its database, which could lead to...

CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

CVE-2023-45674

Farmbot-Web-App (Farmbot Web UI) has an SQL injection flaw in versions prior to 15.8.4 that allows authenticated attackers to extract arbitrary data from the database (including the user table), leading to information disclosure. The issue is mitigated by upgrading to version 15.8.4 or later; no ...

CVE-2023-45674: Improper Neutralization of Special Elements used in an SQL Command

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

PT-2023-29642 · Unknown · Farmbot-Web-App

Name of the Vulnerable Software and Affected Versions: Farmbot-Web-App versions prior to 15.8.4 Description: The Farmbot-Web-App, a web control interface for the Farmbot farm automation platform, contains an SQL injection vulnerability. This issue allows authenticated attackers to extract arbitra...

CVE-2023-42808

CVE-2023-42808 affects Mozilla Common Voice, Version 1.88.2, with a reflected XSS vulnerability. The issue arises because user-controlled data reaches a path expression in a server-side request, enabling reflected XSS in the server origin context. The provided documents do not confirm a patch or ...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...