1567 matches found
cxf: OpenId Connect token service does not properly validate the clientId
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore JKS/PKCS12 by specifing the...
CVE-2020-15052
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
CVE-2020-15052
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
CVE-2020-15052
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
Sql injection
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
CVE-2020-15052
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
CVE-2020-15052
CVE-2020-15052 affects Artica Proxy CE before 4.28.030.418. The vulnerability is a SQL injection via the Netmask, Hostname, and Alias fields, stemming from insufficient validation of externally entered SQL statements in the database-backed Artica Proxy Community Edition. Connected CNVD-2020-41859...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
CVE-2020-5902RCEEXP Blog：http://www.svenbeast.com/post/cve...
Unable to establish VPN Connection with Citrix SSO app [Certificate based Auth] for Android Enterprise
This article has information regarding the Certificate Alias field in the Android Enterprise Managed Configuration for Citrix SSO app using Certificate based authentication...
CVE-2020-13159
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclientmac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818...
CVE-2020-13159
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclientmac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818...
Command injection
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclientmac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818...
CVE-2020-13159
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclientmac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818...
CVE-2020-13159
CVE-2020-13159 concerns Artica Proxy, before 4.30.000000 Community Edition, allowing OS command injection via user-controllable fields: Netbios name, Server domain name, dhclient_mac, Hostname, or Alias. The issue stems from constructing OS commands from unfiltered input, enabling remote code exe...
The vulnerability of the mod_alias_physical_handler module in the lighttpd web server allows a hacker to access confidential data.
The vulnerability of the modaliasphysicalhandler module in the lighttpd web server is related to an error in handling a directory with certain configurations. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2020-14927
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
CVE-2020-14927
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
Cross site scripting
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
CVE-2020-14927
Navigate CMS 2.9 has a cross-site scripting (XSS) flaw exploitable via the Alias or Real URL field in Web Sites > Create > Aliases > Add. CVSS details: v3.1 base score 4.8 (AV:N, AC:L, PR:H, UI:R, S:C, C:L, I:L, A:N) and v2 base score 3.5 (AV:N, AC:M, Au:S, C:N, I:P, A:N). Exploitation s...