Nuxeo-CVE-2018-16341

This repository does not have a README...

CVE-2018-16341

CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: traccar-fips, solr, opensearch-fips, sonarqube, flink-kubernetes-operator-fips, kayenta-fips, automq, cassandra, kafka, logstash, strimzi-kafka-operator-fips, datahub-gms, pinot, wazuh-indexer, datahub-gms-fips, solr-fips, cruise-control-fips, apache-nifi, automq-fip...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: traccar-fips, solr, opensearch-fips, sonarqube, flink-kubernetes-operator-fips, kayenta-fips, automq, cassandra, kafka, logstash, strimzi-kafka-operator-fips, datahub-gms, pinot, wazuh-indexer, datahub-gms-fips, solr-fips, cruise-control-fips, apache-nifi, automq-fip...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: traccar-fips, solr, opensearch-fips, sonarqube, flink-kubernetes-operator-fips, kayenta-fips, automq, cassandra, kafka, logstash, strimzi-kafka-operator-fips, datahub-gms, pinot, wazuh-indexer, datahub-gms-fips, solr-fips, cruise-control-fips, apache-nifi, automq-fip...

GHSA-JH4V-GFQJ-7RHX vulnerabilities

Vulnerabilities for packages: cassandra-reaper, nuxeo, conductor-fips, traccar-fips, druid, logstash-fips, conductor, thingsboard, logstash, traccar...

Nuxeo <10.3 - Remote Code Execution Detection

Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxeo prior to version 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Nuxeo <10.3 - Remote Code Execution

Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection. id: CVE-2018-16341 info: name: Nuxeo 10.3 - Remote Code Execution author: madrobot severity: high description: | Nuxeo prior to version 10.3 is susceptible to a...

EUVD-2017-14945

Malware in sbrugna...

EUVD-2013-4380

Malware in sbrugna...

EUVD-2023-0583

Malicious code in bioql PyPI...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

Security Bulletin: IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system [CVE-2013-4521, CVE-2013-2165 and CVE-2018-14667]

Summary IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system CVE-2013-4521. IBM Security Verify Governance is vulnerable to remote attacks caused by an error related to the handling of deserialization CVE-2013-2165. IBM Security Verify Governance ...

GHSA-X347-FC9W-W7C3 Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

Cross site scripting

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828 Regular expression Denial of Service in MooTools

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...

CVE-2021-32828 Regular expression Denial of Service in MooTools

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting XSS. This XSS can be escalated to Remote Code Execution RCE by levering the automation API...