10605 matches found
AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting
Core Components version 2.20.6 and earlier suffer from a reflected cross-site scripting XSS vulnerability in AdaptiveImageServlet via SVG images. An attacker with author access can upload a special crafted SVG image including a malicious Javascript and obtain a link that, when loaded by another...
Malicious Package
Overview @bigid-ui/components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Microsoft tackles DogWalk zero-day vulnerability and multiple privilege escalation vulnerabilities
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Microsoft Patch Tuesday addresses CVE-2022-34713, also known as DogWalk, as well as numerous issues affecting Microsoft Exchange Server, Microsoft Windows Support Diagnostic Tool MSDT, Windows Print...
Cross site scripting
Adobe Experience Manager Core Components version 2.20.6 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
Malicious Package
Overview @mgmresorts/cart-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
Adobe Experience Manager Cross-Site Script Vulnerability
Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications, and forms. A cross-site scripting vulnerability exists in Adobe Experience Manager Core Components 2.20.6 and prior versions, which originates when a victim accesses a...
biz.netcentric.cq.tools.aemmjml:aemmjml-components-bundle (0.1.0), com.adobe.aem.commons:assetshare.core (>=1.9.6, <=3.13.8) +29 more potentially affected by CVE-2022-35697 via com.adobe.cq:core.wcm.components.core (>=1.1.0, <=2.20.6)
com.adobe.cq:core.wcm.components.core MAVEN version =1.1.0, =1.9.6, =2012.12.01, =2012.12.01, =0.0.6, =0.0.4, =0.0.6, =0.0.6, =1.0.10, =1.0.10, =0.1.0, =2.5.0, =2.27.0 and more Source cves: CVE-2022-35697 Source advisory: MEND:CVE-2022-35697...
CVE-2022-35697
Adobe Experience Manager Core Components version 2.20.6 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
CVE-2022-35697 AEM File Upload Security Issue leading to RXSS
Adobe Experience Manager Core Components version 2.20.6 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
CVE-2022-35697
Adobe Experience Manager Core Components 2.20.6 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL. Exploitation requires low author privileges and a user to visit the link; ...
CVE-2022-35697 AEM File Upload Security Issue leading to RXSS
Adobe Experience Manager Core Components version 2.20.6 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
GO-2022-0761 Improper input validation in net/http and net/http/cgi
An input validation flaw in the CGI components allows the HTTPPROXY environment variable to be set by the incoming Proxy header, which changes where Go by default proxies all outbound HTTP requests. This environment variable is also used to set the outgoing proxy, enabling an attacker to insert a...
Unintended Proxy or Intermediary
Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Unintended Proxy or Intermediary. Go Vulnerability Report: An input validation flaw in the CGI components allows the HTTPPROXY environment variable to be set by the incoming Pro...
CVE-2022-35697: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager Core Components version 2.20.6 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
PT-2022-4095 · Adobe · Adobe Experience Manager Core Components
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager Core Components versions 2.20.6 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability, which may allow an attacker to execute malicious JavaScript content within the conte...
Microsoft Windows Print Spooler Components Security Vulnerabilities
Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected: Windows 11 for ARM64-based Systems,Windows 10...
Security Bulletin: Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, that is used by IBM Workload Scheduler.
Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, that is used by IBM Workload Scheduler. This issue was disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID:CVE-2021-35586 DESCRIPTION: An unspecified vulnerability in Java SE relat...
GHSA-V4HR-4JPX-56GC Streamlit directory traversal vulnerability
Impact Users hosting Streamlit apps that use custom components are vulnerable to a directory traversal attack that could leak data from their web server file-system such as: server logs, world readable files, and potentially other sensitive information. An attacker can craft a malicious URL with...
