1520 matches found
GHSA-7FR2-94H7-CCG2 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...
CVE-2020-35209
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...
CVE-2020-35209
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...
Atomix 安全漏洞
Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows an unauthorized Atomix node to join the target cluster by providing configuration information. No detailed vulnerability details are...
CVE-2020-35209: Undefined Security Weakness
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...
PT-2021-16302
Name of the Vulnerable Software and Affected Versions: BP Better Messages WordPress plugin versions prior to 1.9.9.41 Description: The issue concerns the lack of CSRF checks in multiple AJAX actions within the plugin. Specifically, the affected actions include bp better messages leave chat, bp...
October 5, 2021, update for Outlook 2016 (KB5001998)
None None...
CVE-2021-37630
Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user to join any "Secret Circle" without approval by the Circle owner leaking private information. It is recommended that Nextcloud Circles is...
Mitel MiCollab Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
Cross site scripting
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2021-27401
The Mitel MiCollab Web Client Join Meeting page is vulnerable to Cross‑Site Scripting (XSS) in versions before 9.2 FP2, caused by insufficient input validation. This could allow an attacker to view and modify user data. No exploitation details or remediation are provided in the connected documents.
CVE-2021-27401: Improper Neutralization of Input During Web Page Generation
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
PT-2021-17440
Name of the Vulnerable Software and Affected Versions Mitel MiCollab Web Client versions prior to 9.2 FP2 Description The issue allows an attacker to access, view, and modify user data by executing arbitrary code due to insufficient input validation, also known as Cross-Site Scripting XSS. This...
Mitel Networks MiCollab 跨站脚本漏洞
A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...
CVE-2021-28890
J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the 1 compId parameter to fast/sys/user/list, 2 deptId parameter to fast/sys/role/list, or 3 roleId parameter to fast/sys/role/authUser/list, related to the use of $ to join SQL statements...
rust: optimization for joining strings can cause uninitialized bytes to be exposed
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...