19 matches found
EUVD-2017-9552
Malware in sbrugna...
Malicious code in chat-api2 (npm)
The package chat-api2 was found to contain malicious code...
CVE-2017-18436
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...
Fedora: Security Advisory for jaxb-api2 (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in fb-chat-api2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-325 Malicious code in fb-chat-api2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-31358
A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...
PT-2022-20714
Name of the Vulnerable Software and Affected Versions Proxmox Virtual Environment versions prior to 7.2-3 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under the path "/api2/html/". This enables...
CVE-2022-31358: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...
CVE-2022-31358
A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...
PT-2020-9346
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform version 2018.4 HF3 NPM 12.4, NetPath 1.1.4 Description: The issue is related to improper error handling with stack traces, which can lead to information leakage. This can be demonstrated by discovering a full pathnam...
CVE-2019-12864: Generation of Error Message Containing Sensitive Information
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query...
CVE-2017-18440
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
Code injection
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...
Code injection
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
CVE-2017-18440
CVE-2017-18440 affects cPanel prior to 64.0.21. The vulnerability allows demo users to execute traceroute via the api2 interface (SEC-244). Impact is limited to information collection via traceroute; no broader impact is stated. Remediation is to upgrade to cPanel 64.0.21 or later, or apply provi...
CVE-2017-18436
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...
PT-2019-8375
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows demo users to execute traceroute via the "api2" endpoint. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...