74 matches found
CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...
PT-2024-35069 · Unknown · Web Testimonials
Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...
WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ESB Testimonials versions = 1.0.0...
WordPress ESB Testimonials Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software ESB Testimonials Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51936 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5578fdc416f3 Credits SOPROBRO Required privilege Contributor...
VulnCheck KEV: CVE-2021-40684
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...
esb-splp.layanan.go.id Cross Site Scripting vulnerability OBB-3851993
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-45589
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...
CVE-2022-45589
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...
Sql injection
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...
CVE-2022-45589
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...
Talend ESB SQL注入漏洞
Talend ESB is a reliable and scalable enterprise service bus ESB from Talend, Inc. that enables development teams to manage integration projects in a holistic manner, combining application and data management integration in complex heterogeneous computing environments. An SQL injection...
CVE-2022-45589
CVE-2022-45589 affects Talend ESB Runtime. The provisioning service in Talend ESB Runtime versions prior to 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT is vulnerable to SQL Injection. Upgrade to 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT (or later releases) to mitigate. The vulnerability is tied to the p...
PT-2023-14713 · Talend · Talend Esb Runtime
Name of the Vulnerable Software and Affected Versions: Talend ESB Runtime versions prior to 8.0.1-R2022-10-RT Talend ESB Runtime versions prior to 7.3.1-R2022-09-RT Description: The issue concerns SQL Injection attacks in the provisioning service of the Talend ESB Runtime. Users of the provisioni...
Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2021-20354)
Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, and WebSphere Enterprise Service Bus. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a securi...
CVE-2021-43892
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...
CVE-2021-43892
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...
CVE-2021-43892
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...
Spoofing
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...