PT-2021-30824

Name of the Vulnerable Software and Affected Versions Openafs versions prior to 1.9.1 Description The issue arises from certain AFS3 clients that improperly construct access control lists, which are then stored in directories via the RXAFS StoreACL opcode. These clients add negative access contro...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to 1...