1069 matches found
CVE-2016-6063
Summary: CVE-2016-6063 affects IBM Resilient prior to version 28 due to the use of outdated SSH ciphers. Affected versions: IBM Resilient 26.0, 26.1, 26.2, 26.3, 26.4, 27.0, 27.1. Impact: potential vulnerability in SSH communication when outdated ciphers are used. Root cause: default sshd_config ...
CVE-2018-1412
CVE-2018-1412 affects IBM DOORS Next Generation (DNG/RRC) with a cross-site scripting flaw in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Affected: Rational DOORS Next Generation 6.0–6.0.5 (note: 6.0.6 is not affected)...
CVE-2019-4251
CVE-2019-4251 is an IBM Rational Quality Manager cross-site scripting vulnerability affecting RQM 6.0–6.0.6.1. An attacker could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation for 6.0.x is to upgrade to 6.0.6.1 iFix004...
future-music.net Cross Site Scripting vulnerability OBB-2820133
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2019-15928
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
PT-2022-20534 · Laminas · Laminas Diactoros
Name of the Vulnerable Software and Affected Versions: laminas-diactoros versions prior to 2.11.1 Description: The laminas-diactoros PHP package is vulnerable to potential host, protocol, and/or port modification of a LaminasDiactorosUri instance associated with the incoming server request, based...
future-very-welcome.de Cross Site Scripting vulnerability OBB-2722770
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Multiple functions in GovernorBravoDelegator.sol could cause dangerous future mistakes
Lines of code Vulnerability details Submitting as med risk because these are very important functions and using requires like this seems very likely to cause future mistakes Impact Increases likelihood of future vulnerabilities Proof of Concept initiateDelegated acceptInitialAdminDelegated and...
CVE-2021-38954
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...
MAL-2022-51 Malicious code in @3p-future-solutions/ember-cui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 397fc341835af149d910a487918b036cb2520795441767e7953264ec9c8a86d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-38954
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...
CVE-2022-1387
The No Future Posts WordPress plugin through 1.4 does not escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...
CVE-2022-1387
The No Future Posts WordPress plugin through 1.4 does not escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...
CVE-2022-1387
The No Future Posts WordPress plugin through 1.4 does not escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...
CVE-2022-1387
CVE-2022-1387 affects WordPress No Future Posts plugin version
PT-2022-13848
Name of the Vulnerable Software and Affected Versions No Future Posts WordPress plugin versions 1.4 and earlier Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks when unfiltered html is disallowed due to the plugin not escaping its settings...
CVE-2022-1387: Improper Neutralization of Input During Web Page Generation
The No Future Posts WordPress plugin through 1.4 does not escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...
WordPress plugin No Future Posts 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress No Future Posts plugin 1.4 and earlier versions have a cross-site scripting vulnerability that stem...
Celebrating 15 Years of Pwn2Own
Join Erin Sindelar, Mike Gibson, Brian Gorenc, and Dustin Childs as they discuss Pwn2Own's 15th anniversary, what we've learned, and how the program will continue to serve the cybersecurity community in the future...
