CVE-2023-31181

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31181

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

Path traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

Cross site scripting

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-24966)

Summary IBM WebSphere Application Server is vulnerable to cross site scripting in the Admin Console. This has been addressed in the remediation section below. Vulnerability Details CVEID:CVE-2023-24966 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting. This...

CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31180 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

CVE-2023-31181

Affected software: WJJ Software InnoKB Server and InnoKB/Console, version 2.2.1. Issue: Path traversal (CWE-22) that allows accessing files/directories outside the intended root due to improper input handling. Documented impact aligns with high confidentiality impact per CVSS 3.1 but no exploitab...

CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

PT-2023-11484 · Unknown · Bluethrust Clan Scripts

Name of the Vulnerable Software and Affected Versions: Bluethrust Clan Scripts version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to escalate privileges to an arbitrary account via a crafted request to "/members/console.php?cID=5". Recommendations: For Bluethrust Clan...

CVE-2023-31180

WJJ Software InnoKB Server/Console 2.2.1 is affected by reflected cross-site scripting (RXSS) via an unspecified request. The vulnerability is documented across multiple feeds, with CVSS v3.1 metrics indicating Networks access, Low attack complexity, and user interaction required. There is no exp...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.9 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.9 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

PT-2023-14141 · Nozomi Networks · Nozomi Networks Guardian +1

Name of the Vulnerable Software and Affected Versions: Nozomi Networks Guardian and CMC affected versions not specified Description: The issue is caused by improper input validation in the Alerts controller, allowing an authenticated attacker to execute arbitrary SQL queries on the DBMS used by t...

Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2

Summary A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the Alerts controller, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application. Impact Authenticated users can extract arbitrary...

Triton 安全漏洞

Triton is a Minecraft plugin used to improve the multi-language support of Minecraft! A security vulnerability exists in Triton versions prior to 3.8.4, which stems from CustomPayload packets allowing commands to be executed on the console...

Improper Input Validation

flatpak is vulnerable to Improper Input Validation. Vulnerability allows copied text from a linux virtual console to be run after flatpak app is closed resulting in improper input validation...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2023-26283)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-24966)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to cross-site scripting in the Admin Console (CVE-2023-24966)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to cross-site scripting in the Admin Console CVE-2023-24966 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to cross-site scripting in the Admin Console (CVE-2023-24966)

Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to cross-site scripting in the Admin Console CVE-2023-24966 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...