17766 matches found
CVE-2024-29184
FreeScout before 1.8.128 is affected by a Stored XSS in the Signature Input Field. The CSP policy (script-src 'self' 'nonce-abcd') blocks inline scripts and nonces, but an attacker bypassed it by uploading a JS file via POST to /conversation/upload and then using the uploaded file’s URL as the sr...
CVE-2024-29184 FreeScout Stored XSS to Privilege Escalation After CSP Bypass
FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting XSS vulnerability has been identified within the Signature Input Field of the FreeScout Application prior to version 1.8.128. Stored XSS occurs when user input is not properly sanitized and is stored on the...
CVE-2024-29273
There is Stored Cross-Site Scripting XSS in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document...
CVE-2024-28045
CVE-2024-28045 involves cross-site scripting in Delta Electronics DIAEnergie. The issue stems from improper neutralization of input, affecting DIAEnergie systems (affected versions prior to v1.10.00.005). Exploitation could enable attacker-controlled scripts to run in user browsers, potentially c...
CVE-2024-28179
CVE-2024-28179 affects the jupyter-server-proxy component prior to versions 3.2.3 and 4.1.1, where websocket proxying did not enforce authentication, enabling unauthenticated remote access to any websocket endpoint exposed via Jupyter Server Proxy. The websocket endpoints provided by jupyter_serv...
CVE-2024-27286
Zulip vulnerability CVE-2024-27286 affects Zulip Server 3.0 up to (but not including) 8.3, where moving a single message from a public stream to a private stream can leave the message accessible. According to the description, the move operation could successfully relocate the message but active u...
CVE-2023-51445
GeoServer’s CVE-2023-51445 is a stored XSS in the REST Resources API. Affected versions prior to 2.23.3 and 2.24.0 allow an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources, which will execute in another administrator’s b...
CVE-2024-2291
CVE-2024-2291 (MOVEit Transfer) is a logging bypass vulnerability affecting MOVEit Transfer versions prior to 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), and 2023.1.4 (15.1.4). An authenticated user can manipulate a request to bypass the web application’s logging mechanism, causi...
CVE-2024-23721
A Directory Traversal vulnerability exists in the process_post function of Draytek Vigor3910 devices running version 4.3.2.5 and earlier. By sending a specifically crafted POST request , an attacker can trigger the vulnerable function to export information from the device. To mitigate this risk u...
Lurking in the Shadows: Attack Trends Shine Light on API Threats
...
CVE-2024-2632
Summary: CVE-2024-2632 is an information-exposure vulnerability in Meta4 HR exposed via HTTP GET to /sitetest/english/dumpenv.jsp. The endpoint reportedly leaks substantial environment details, including process variables, Tomcat version, library versions, and underlying OS. Sources across NVD/CV...
CVE-2024-1145
The CVE-2024-1145 entry concerns Devklan’s Alma Blog (versions 2.1.10 and earlier) with a user-enumeration vulnerability. The affected component is the user-facing response handling that allows a remote attacker to discover valid user accounts by inspecting request responses. Impact is informatio...
CVE-2024-26030
Adobe Experience Manager 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows attacker-injected JavaScript to run in a victim’s browser when visiting affected pages. Remediation is available via Adobe APSB24-05 security update; apply the APSB24...
Authorization Bypass
Mattermost is vulnerable to Authorization Bypass in Playbooks Plugin Endpoint. The vulnerability is due to Mattermost's failure to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin. This allows an attacker to obtain limited...
CVE-2024-22257
CVE-2024-22257 refers to a broken access control in Spring Security where an application vulnerable if it directly uses AuthenticatedVoter.vote with a null Authentication. The entry lists affected versions: 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, 6.0.x prior to 6.0.9, 6.1.x prior to 6.1.8, ...
CVE-2024-2586
AMSS++ v4.31 is affected by CVE-2024-2586 due to an SQL injection in the username parameter of /amssplus/index.php, allowing an attacker to craft a query to retrieve data from the database. The vulnerability is network-based with low exploit complexity, and the impact is on confidentiality (high)...
CVE-2024-2002
CVE-2024-2002 describes a double-free in libdwarf when processing a multiply-corrupted DWARF object, where an allocation may be freed twice, leading to unpredictable results. Multiple connected advisories (Red Hat, CBL Mariner, Tencent/TSSA, Azure Linux, etc.) confirm libdwarf as the vulnerable c...
CVE-2024-28039
A vulnerability exists in FitNesse (all releases) due to the improper restriction of XML external entity references (CWE-611). This flaw allows a remote unauthenticated attacker to obtain sensitive information, alter data, or trigger a denial-of-service (DoS) condition. To mitigate this risk, the...
Cisco IP Phones Stored Cross-Site Scripting (CVE-2023-20265)
A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation ...