27 matches found
CVE-2023-29213
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of org.xwiki.platform:xwiki-platform-logging-ui it is possible to trick a user with programming rights into visiting a constructed url where e.g., by embedding an image wi...
SUSE CVE-2022-22817
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used...
PT-2022-1455
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 9.0.1 Description The issue allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used, potentially enabling a remote attacker to execute arbitrary...
PT-2021-22156
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The scheduler service, which runs on a specific TCP port, allows users to start and stop jobs. However, it does not sanitize the supplied JOB ID provided ...
Apache Archiva 1.2.x <= 1.2.2 / 1.3.x <= 1.3.6 Multiple Vulnerabilities
According to its self-reported version, the instance of Apache Archiva hosted on the remote web server is 1.2.x prior than or equal to 1.2.2 or 1.3.x prior than or equal to 1.3.6 and thus is affected by the following vulnerabilities : - An input validation error exists related to unspecified...
CVE-2013-4330: Improper Control of Generation of Code
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple" in a CamelFileName message header to a 1 FILE or 2 FTP producer...
I and expression of the day and is Day-vulnerability warning-the black bar safety net
When you first use the expression the way toxss, you definitely dumbfounded, and kept the bomb box, can't close the browser, eventually you can only sacrifice the task Manager the process ends. Maybe your Other TAB pages are filled to the half has not yet submitted the form, you will be expressio...