PT-2022-4619

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 102.2 Thunderbird versions prior to 91.13 Firefox ESR versions prior to 91.13 Firefox ESR versions prior to 102.2 Firefox versions prior to 104 Description The issue is related to the implementation of XSLT...

Mozilla Firefox 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla Firefox prior to version 104,...

Mozilla Thunderbird < 91.13

The version of Thunderbird installed on the remote Windows host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-37 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.1 and Thunderbird 91.12...

Mozilla Firefox ESR < 91.13

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-35 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1,...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-235-03)

The version of mozilla-thunderbird installed on the remote host is prior to 102.2.0 / 91.13.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-235-03 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

DEBIAN-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

UBUNTU-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

wkhtmltopdf 代码问题漏洞

wkhtmltopdf is wkhtmltopdf open source a library . Used to convert HTML to PDF. A code issue vulnerability exists in wkhtmltopdf version 0.12.6, which stems from the fact that it allows an attacker to gain initial access to a target system by injecting an iframe tag with the IP address of the...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583: Server-Side Request Forgery (SSRF)

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

PT-2022-22910

Name of the Vulnerable Software and Affected Versions wkhtmlTOpdf version 0.12.6 Description The issue allows an attacker to gain initial access into the target's system by injecting an iframe tag with the initial asset IP address on its source. This enables the attacker to potentially take over...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

Eyes Of Network (EON) <= 5.3 Multiple Vulnerabilities

Eyes Of Network EON is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-38357

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/moduleframe/index.php...

CVE-2022-38357

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/moduleframe/index.php...

Design/Logic Flaw

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/moduleframe/index.php...

CVE-2022-38357

CVE-2022-38357 affects Eyes of Network Web application (EON). Public sources in the connected docs describe an iFrame injection vulnerability triggered by the url parameter in /module/module_frame/index.php, resulting in high impact (CVE details show CVSS v3.1: 8.8, network attack, user interacti...