EUVD-2022-52693

Malicious code in bioql PyPI...

EUVD-2022-52694

Malicious code in bioql PyPI...

CVE-2022-30982

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

CVE-2022-30981

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

CVE-2022-30981

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

CVE-2022-30982

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

CVE-2022-30981

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

CVE-2022-30982

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

CVE-2022-30981

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

Cross site scripting

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

Remote code execution

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

CVE-2022-30982

CVE-2022-30982 affects Gentics CMS prior to 5.43.1 with a stored XSS vulnerability in profile descriptions and usernames. Connected documents corroborate the issue and specify vulnerable versions (before 5.43.1) and a fix in 5.43.1 or higher. No exploitation details are provided in the sources; m...

CVE-2022-30982

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

CVE-2022-30981

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

CVE-2022-30981

The provided Connected documents identify a concrete vulnerability: Gentics CMS prior to 5.43.1 is vulnerable to arbitrary data deserialization (via uploading a malicious ZIP file), which can potentially lead to Java code execution. The root cause is unsafe Java deserialization during ZIP upload....

CVE-2022-30981: Deserialization of Untrusted Data

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...

PT-2022-20436

Name of the Vulnerable Software and Affected Versions Gentics CMS versions prior to 5.43.1 Description The issue concerns stored XSS in the profile description and in the username. Recommendations For versions prior to 5.43.1, update to version 5.43.1 or later to resolve the issue...

CVE-2022-30982: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

PT-2022-20435

Name of the Vulnerable Software and Affected Versions Gentics CMS versions prior to 5.43.1 Description An issue was discovered that allows an attacker to deserialize arbitrary data by uploading a malicious ZIP file, potentially achieving Java code execution. Recommendations For versions prior to...

Gentics CMS 5.36.29 Cross Site Scripting / Deserialization Vulnerability

Gentics CMS version 5.36.29 suffers from persistent cross site scripting and unsafe java deserialization vulnerabilities. ======================================================================= title: Stored Cross-Site Scripting & Unsafe Java Deserializiation product: Gentics CMS vulnerable...