1946 matches found
Cross site scripting
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...
CVE-2022-43271
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...
CVE-2022-43271
CVE-2022-43271 affects Inhabit Systems Move CRM version 4, build 260, with a cross-site scripting (XSS) vulnerability via the User profile component. Public details in the provided documents confirm the issue exists and indicate a CVSS v3.1 base score of 5.4 (MEDIUM) with network attack vector, l...
CVE-2022-43271: Improper Neutralization of Input During Web Page Generation
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...
PT-2022-26820
Name of the Vulnerable Software and Affected Versions Inhabit Systems Pty Ltd Move CRM version 4, build 260 Description A cross-site scripting XSS issue was found in the User profile component. This allows for potential malicious script execution. Recommendations For Inhabit Systems Pty Ltd Move...
Inhabit Systems Move CRM 跨站脚本漏洞
Inhabit Systems Move CRM is a comprehensive business management system and CRM from Inhabit Systems Australia. A security vulnerability exists in Inhabit Systems Move CRM version 4 build 260, which stems from its User profile component that allows an attacker to implement cross-site scripting...
CVE-2022-43271
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...
Apache Zeppelin input validation error vulnerability
Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash...
Apache Zeppelin 输入验证错误漏洞
Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash...
PT-2022-9904 · Apache · Apache Zeppelin
Name of the Vulnerable Software and Affected Versions: Apache Zeppelin versions 0.9.0 and prior versions Description: The issue is related to improper Input Validation in the "Move folder to Trash" feature of Apache Zeppelin, allowing an attacker to delete arbitrary files. Recommendations: For...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5728-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5728-2 advisory. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading t...
Critical Flaw Reported in Move Virtual Machine Powering the Aptos Blockchain Network
Researchers have disclosed details about a now-patched critical flaw in the Move virtual machine that powers the Aptos blockchain network. The vulnerability "can cause Aptos nodes to crash and cause denial of service," Singapore-based Numen Cyber Labs said in a technical write-up published earlie...
Exploit for Incorrect Default Permissions in Avira Avira_Security
CVE-2022-3368 PoC for arbitrary file move vulnerability in So...
Memory corruption
An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When there is a continuous mac move a memory corruption causes one or mo...
CVE-2022-22249: Improper Control of a Resource Through its Lifetime
An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When there is a continuous mac move a memory corruption causes one or mo...
CVE-2022-42029: Unrestricted Upload of File with Dangerous Type
Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory...
CVE-2022-41604
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
Authentication flaw
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
CVE-2022-41604: Improper Privilege Management
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
