Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the getChildBlocks API endpoint. An attacker can access the contents of any document, including encrypted or restricted files, by supplying arbitrary document IDs to the API. Remediation Upgrade...

UBUNTU-CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

PT-2024-13872 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.2.1 to Infinity 23.1.0 Description: The issue is related to generated PDFs, which could expose file contents. Recommendations: For Pega Platform versions 8.2.1 to Infinity 23.1.0, at the moment, there is no informatio...

CVE-2023-49923

An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. Depending on the contents of such documents, this could lead to the insertion of sensitive or private information in the App Search logs. Elastic has released...

Cross-site Scripting (XSS) - Stored in zmister2016/mrdoc

✍️ Description Stored xss bug allow to execute arbitary javascript code in vicitm account 🕵️‍♂️ Proof of Concept 1. First create a document and put bellow xss payload inside document content .\ xss"''\ 2. Now any user view this document project then xss is executed VIDEO POC --...

CVE-2006-5492

Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...

CVE-2006-5492

Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...

CVE-2006-5492

Technical details for CVE-2006-5492 are not publicly available in the provided documents. No affected products, components, or exploit specifics are disclosed here. Monitor for updated information from official sources.