RHEL 9 : shadow-utils (RHSA-2023:6632)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6632 advisory. The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user a...

WordPress Plugin Ziteboard Online Whiteboard Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin Interact: Embed A Quiz On Your Site Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-37908

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid attribute...

Cross site scripting

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid attribute...

CVE-2023-37908

The CVE affects XWiki Rendering (xwiki-rendering) where a change to attribute cleaning during XHTML rendering introduced in version 14.6-rc-1 allowed arbitrary HTML injection via invalid attribute names. This could enable XSS (e.g., via link syntax in content like comments) and, for privileged us...

XWiki Rendering Cross-Site Scripting Vulnerability

XWiki Rendering is a general-purpose rendering system from the XWiki Foundation that converts text input from a given syntax wiki syntax, HTML, etc. to another syntax XHTML, etc.. A security vulnerability exists in XWiki Rendering, which stems from an attribute cleaning during XHTML rendering tha...

The vulnerability of the network management system for monitoring and managing industrial networks in SINEC NMS, related to improper data cleaning in the SNMP configuration, allows a attacker to execute XSS attacks.

The vulnerability of the network management system for monitoring and managing industrial networks in SINEC NMS is related to improper data cleaning in the SNMP configuration. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the software for creating wireless routers based on Debian RaspAP, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.

The vulnerability of the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted POST request with t...

The vulnerability of the module of the virtual trusted platform for Windows operating systems, which allows a perpetrator to trigger a service failure

The vulnerability of the virtual trusted platform module for Windows operating systems is related to improper resource cleaning. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of Windows operating system deployment services, allowing attackers to trigger service failures

The vulnerability of Windows operating system deployment services is related to improper resource cleaning. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of Apache Tomcat application servers exists due to incomplete cleaning of temporary or auxiliary resources, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Apache Tomcat application server exists due to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, and the Atos Unify OpenScape 4000 Manager, a network centralized management platform, allows attackers to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, and the Atos Unify OpenScape 4000 Manager, a centralized network management platform, is related to insufficient cleaning of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, allows a intruder to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, is related to insufficient cleaning of input data during the processing of dtb format files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

Fedora 37 : xen (2023-948136565a)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-948136565a advisory. arm32: The cache may not be properly cleaned/invalidated XSA-437, CVE-2023-34321 top-level shadow reference dropped too early for 64-bit PV guests...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-2911)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLPI Path Traversal Vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software arises from the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software arises from the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the REMOTEPORT parameter...