CVE-2021-38374

OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app loader URL...

CVE-2021-38374

OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app loader URL...

CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

The vulnerability of the Zoom video conferencing service arises from an incorrect path name limitation for accessing the restricted catalog, allowing a violator to execute arbitrary code.

The vulnerability of the Zoom video conferencing service exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created message a “snippet” with the code...