4484 matches found
CVE-2023-31172
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...
Design/Logic Flaw
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1497 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.12)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.92)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-41080 Source...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12401 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.79)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-41080 Source advisory: OSV:GHSA-Q3MW-PVR8-9GGC...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.92)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-41080 Source...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1497 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.12)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...
org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m10), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m1, <=11.0.0-m10) potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m10)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m10 Source cves: CVE-2023-41080 Source advisory: GHSA-Q3MW-PVR8-9GGC...
org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m10), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m1, <=11.0.0-m10) potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m10)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m10 Source cves: CVE-2023-41080 Source advisory: OSV:GHSA-Q3MW-PVR8-9GGC...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12401 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.79)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-41080 Source advisory: GHSA-Q3MW-PVR8-9GGC...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12401 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.79)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-41080 Source advisory: MEND:CVE-2023-41080...
org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m10), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m1, <=11.0.0-m10) potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m10)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m10 Source cves: CVE-2023-41080 Source advisory: MEND:CVE-2023-41080...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1497 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.12)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-41080 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.92)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-41080 Source...
(0Day) LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the copyContent command. Due to the improper restriction ...
Default credentials
DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a...
Cross-site Scripting (XSS)
braft-editor is vulnerable to Cross-site Scripting. The vulnerability exists due to a lack of sanitization of HTML elements in the embed media feature, which allows an attacker to inject and execute malicious Javascript into the browser...
Margox Braft-Editor Cross-site Scripting Vulnerability
Cross Site Scripting XSS vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature...
GHSA-JFRF-VV54-J2JG Margox Braft-Editor Cross-site Scripting Vulnerability
Cross Site Scripting XSS vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature...