3669 matches found
librsvg: Arbitrary file read when xinclude href has special characters
A directory traversal vulnerability was discovered in the URL decoder of Librsvg. This issue occurs when xinclude href has special characters; demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element, which can allow an attacker to send a specially crafted URL...
VulnCheck KEV: CVE-2023-36846
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication an attacker is ab...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
August 22, 2023-KB5029848 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2
None None...
Rockwell Automation ThinManager 路径遍历漏洞
Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers at the same time. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...
CVE-2023-33867
Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
VulnCheck KEV: CVE-2023-38180
Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service DoS...
CVE-2023-36873
.NET Framework Spoofing Vulnerability...
PT-2023-4300 · Microsoft +7 · Visual Studio +8
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio versions affected versions not specified Microsoft .NET versions affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio and the .NET platform, whic...
UBUNTU-CVE-2023-38178
.NET Core and Visual Studio Denial of Service Vulnerability...
Night Club Booking Software Cross-Site Scripting Vulnerability
Night Club Booking Software is a PHP Jabbers open source night club booking software. PHP Jabbers Night Club Booking Software version 1.0 suffers from a cross-site scripting vulnerability that stems from the parameter index in the file /index.php can lead to cross-site scripting...
PT-2023-27785 · Phpjabbers · Phpjabbers Availability Booking Calendar
Name of the Vulnerable Software and Affected Versions: PHP Jabbers Availability Booking Calendar version 5.0 Description: A vulnerability has been found in the software, classified as problematic. It affects an unknown functionality of the file /index.php. The manipulation of the session id...
AZL-34582 CVE-2023-3978 affecting package cert-manager for versions less than 1.12.12-1
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
CVE-2023-35016
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257772...
PT-2023-25096 · Ibm · Ibm Security Verify Governance
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager version 10.0 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences /../ to view arbitra...
CVE-2023-35016: Improper Limitation of a Pathname to a Restricted Directory
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257772...
Ericsson OSCORE 代码注入漏洞
Ericsson OSCORE is a new lightweight IoT security protocol from Ericsson Sweden. A security vulnerability exists in Ericsson OSCORE v2.2.6 and earlier versions, which stems from a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless...
MingSoft MCMS 跨站脚本漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingFei MingSoft. A cross-site scripting vulnerability exists in Mingsoft MCMS 5.3.1 and earlier versions, which stems from the parameter style in the file search.do that can lead to cross-site scripting...
CVE-2023-3853
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...