Lucene search
+L

208 matches found

OSV
OSV
added 2025/06/18 11:15 a.m.5 views

DEBIAN-CVE-2022-50063

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

5.5CVSS5.4AI score0.0014EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.7 views

UBUNTU-CVE-2022-50063

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

5.5CVSS5.7AI score0.0014EPSS
Exploits0References4
CVE
CVE
added 2025/06/18 11:2 a.m.29 views

CVE-2022-50063

CVE-2022-50063 is a Linux kernel issue affecting the DSA felix driver, where dsa_tree_notify handling can cause repeated tagging-protocol changes and lead to a kernel crash. The root cause is described as suppressing non-changes to the tagging protocol in felix_change_tag_protocol(), which can tr...

5.5CVSS6.3AI score0.0014EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/06/18 11:2 a.m.11 views

CVE-2022-50063 net: dsa: felix: suppress non-changes to the tagging protocol

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

0.0014EPSS
Exploits0References2
OSV
OSV
added 2025/06/18 11:2 a.m.8 views

CVE-2022-50063 net: dsa: felix: suppress non-changes to the tagging protocol

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

5.5CVSS6.1AI score0.0014EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/06/18 11:2 a.m.11 views

CVE-2022-50063

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

5.5CVSS5.4AI score0.0014EPSS
Exploits0
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a duplicate registration issue caused by the felix driver performing operations even when the labeling...

5.5CVSS6.2AI score0.0014EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/06/06 12:0 a.m.10 views

The vulnerability of the Apache Felix HTTP Webconsole plugin, which stems from the lack of protective measures for website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Apache Felix HTTP Webconsole plugin is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

4CVSS5.2AI score0.00512EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 8:37 a.m.7 views

CVE-2024-32800

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Felix Moira Popup More Popups allows Stored XSS.This issue affects Popup More Popups: from n/a through 2.3.1...

5.9CVSS6.7AI score0.00248EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:13 a.m.16 views

CVE-2023-41684

Cross-Site Request Forgery CSRF vulnerability in Felix Welberg SIS Handball plugin = 1.0.45 versions...

8.8CVSS7.1AI score0.00201EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:56 a.m.8 views

CVE-2023-33924

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45...

9.8CVSS8.9AI score0.00687EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2025/04/11 10:19 a.m.6 views

felix-bloch-erben.de Cross Site Scripting vulnerability OBB-4043572

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:0 a.m.9 views

Vulnerability of the felix_setup_mmio_filtering() function in the drivers/net/dsa/ocelot/felix.c module – a driver for supporting DSA cores in the Linux operating system, which allows an attacker to cause a service failure.

Vulnerability of the felixsetupmmiofiltering function in the drivers/net/dsa/ocelot/felix.c module – The DSA kernel support driver for the Linux operating system is vulnerable to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.6AI score0.00205EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2025/03/18 2:47 a.m.8 views

Cross-Site Scripting (XSS)

org.apache.felix, org.apache.felix.http.webconsoleplugin is vulnerable to cross-site scripting XSS. The vulnerability is due to improper neutralization of user input during web page generation, allowing an attacker to inject and execute malicious scripts in a victim’s browser through improperly...

5.6CVSS6.2AI score0.00512EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/15 7:38 a.m.34 views

CVE-2025-27867

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

5.6CVSS6.8AI score0.00512EPSS
Exploits0References1
OSV
OSV
added 2025/03/12 6:32 p.m.59 views

GHSA-2CV6-4F2R-JQ2C Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

6.3CVSS6.8AI score0.00512EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/03/12 6:32 p.m.17 views

Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

5.6CVSS7.1AI score0.00512EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2025/03/12 4:15 p.m.36 views

CVE-2025-27867

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

5.6CVSS0.00512EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/12 3:51 p.m.8 views

CVE-2025-27867 Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

7.1AI score0.00512EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/12 3:51 p.m.38 views

CVE-2025-27867 Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

0.00512EPSS
Exploits0References1
Rows per page
Query Builder