Lucene search
+L

1896 matches found

CVE
CVE
added 2021/05/06 9:46 p.m.72 views

CVE-2020-23264

CVE-2020-23264 is a CSRF vulnerability in the Fork-CMS platform, affecting versions before 5.8.2 . The issue allows remote attackers to hijack the authentication of logged-in administrators. The provided documents specify the vulnerability but do not include a concrete root-cause analysis or expl...

8.8CVSS8.9AI score0.00629EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 9:46 p.m.27 views

CVE-2020-23264

Cross-site request forgery CSRF in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators...

9AI score0.00629EPSS
SaveExploits0References1
CVE
CVE
added 2021/05/06 9:42 p.m.80 views

CVE-2020-23263

Fork CMS 5.8.2 is affected by a persistent cross-site scripting (XSS) vulnerability (CVE-2020-23263). Attack vector: remote, via user-supplied data in navigation_title and title parameters on /private/en/pages/add. Impact described as injection of arbitrary Javascript code; authenticated/unauthen...

6.1CVSS6.2AI score0.00844EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 9:42 p.m.22 views

CVE-2020-23263

Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigationtitle" parameter and the "title" parameter in /private/en/pages/add...

6.3AI score0.00844EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/06 12:0 a.m.10 views

Fork CMS 跨站脚本漏洞

Fork is an easy to use, open source CMS using Symfony components. A persistent cross-site scripting vulnerability exists in Fork CMS version 5.8.2. The vulnerability can be exploited to inject arbitrary Javascript code via the navigationtitle and title parameters in /private/en/pages/add...

6.1CVSS5.5AI score0.00844EPSS
SaveExploits0References1
Code423n4
Code423n4
added 2021/04/30 12:0 a.m.9 views

Lack of chain information in the signed data leads to potential replay attacks.

Handle shw Vulnerability details Impact The Offer structure, whose hash is signed by a maker, does not contain information of the current chain. Therefore, the signature is valid on all EVM-compatible chains. In the situation of a future hard fork of the Ethereum network, the valid signatures on...

6.6AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/04/02 5:15 p.m.3 views

CVE-2021-22200

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user...

7.5CVSS7AI score0.01003EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/04/02 5:15 p.m.4 views

UBUNTU-CVE-2021-22200

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user...

7.5CVSS7AI score0.01003EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/04/02 12:0 a.m.6 views

PT-2021-14911 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.6 and later Description: An issue has been discovered affecting GitLab CE/EE, where under a special condition, it was possible for an anonymous user to access data of an internal repository through a public project...

7.5CVSS7.2AI score0.01003EPSS
SaveExploits0References9
FreeBSD
FreeBSD
added 2021/04/01 12:0 a.m.47 views

Pillow -- multiple vulnerabilities

python-pillow reports: This release fixes several vulnerabilities found with OSS-Fuzz. CVE-2021-25288: Fix OOB read in Jpeg2KDecode. This dates to Pillow 2.4.0. CVE-2021-28675: Fix DOS in PsdImagePlugin. This dates to the PIL fork. CVE-2021-28676: Fix FLI DOS. This dates to the PIL fork...

9.1CVSS1.5AI score0.02453EPSS
SaveExploits0
Huntr
Huntr
added 2021/03/23 10:12 p.m.15 views

Cross-site Scripting (XSS) - Generic in forkcms/forkcms

✍️ Description A cross-site scripting XSS issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publishontime" Parameter 🕵️‍♂️ Proof of Concept Vulnerable Parameter: publishontime XSS payload: 17:59'"&%alert1 Steps to reproduce issue 1- Login to Fork admin panel 2-...

1.2AI score
SaveExploits0
Huntr
Huntr
added 2021/03/23 10:10 p.m.12 views

Cross-site Scripting (XSS) - Generic in forkcms/forkcms

✍️ Description A cross-site scripting XSS issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publishondate" Parameter 🕵️‍♂️ Proof of Concept Vulnerable parameter: publishondate XSS payload: '"%26%25alert1 Steps to reproduce issue 1- Login to Fork admin panel 2-...

1.2AI score
SaveExploits0
Huntr
Huntr
added 2021/03/23 6:9 p.m.12 views

Cross-site Scripting (XSS) - Generic in forkcms/forkcms

✍️ Description A cross-site scripting XSS issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "enddate" Parameter 🕵️‍♂️ Proof of Concept XSS payload: '"%26%25alert1 Steps to reproduce issue 1- Login to Fork admin panel 2- Goto Modules=Formbuilder 3- Turn on Burp...

1.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/03/22 3:58 p.m.35 views

CVE-2021-23346

The html-parse-stringify library, as well as its fork html-parse-stringify2, are vulnerable to a Regular Expression Denial of Service attack ReDos. A certain inputs could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

5.3CVSS4.8AI score0.02129EPSS
SaveExploits1References6
Veracode
Veracode
added 2021/03/04 4:39 a.m.18 views

Unauthorised Modification

pgpverify-maven-plugin allows unauthorized modification. An attacker is able to push base repository or access secrets by checking out and running build script from a fork the untrusted code is running in an environment...

3AI score
SaveExploits0
OSV
OSV
added 2021/03/03 4:15 a.m.5 views

CVE-2021-22862

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference ...

6.5CVSS6.6AI score0.0081EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/03 4:15 a.m.4 views

CVE-2021-22862

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference ...

6.5CVSS6.6AI score0.0081EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/03 4:15 a.m.31 views

Improper access control

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference ...

4CVSS6.4AI score0.0081EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/03/03 3:25 a.m.85 views

CVE-2021-22863

CVE-2021-22863 is an improper access control vulnerability in GitHub Enterprise Server’s GraphQL API. It allowed authenticated users to modify the maintainer collaboration permission on a pull request, potentially exposing head branches of repos where they are a maintainer. Affected versions span...

8.1CVSS8.1AI score0.00968EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.12 views

The vulnerability of the infiniband HFI1 driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s infiniband HFI1 driver relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure, after opening the dev and fork files...

4.9CVSS6.4AI score0.00308EPSS
SaveExploits0References12Affected Software5
Rows per page
Query Builder