Lucene search
+L

5239 matches found

Citrix
Citrix
added 2022/10/10 12:0 a.m.16 views

CWA for HTML5 "Multi-Monitor setup requires permission" message appears even with single monitor

Below message is seen after launching a session using the HTML5 client .Multi-monitor setup requires permission Do you want to give permission to use multiple monitors? The message is seebn even though there is only 1 monitor on the client device...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.63 views

RHEL 7 : Red Hat Single Sign-On 7.5.3 security update on RHEL 7 (Moderate) (RHSA-2022:6782)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6782 advisory. Red Hat Single Sign-On 7.5 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

10CVSS7.4AI score0.63211EPSS
SaveExploits5References19
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.66 views

RHEL 8 : Red Hat Single Sign-On 7.5.3 security update on RHEL 8 (Moderate) (RHSA-2022:6783)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6783 advisory. Red Hat Single Sign-On 7.5 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

10CVSS7.4AI score0.63211EPSS
SaveExploits5References19
RedHat Linux
RedHat Linux
added 2022/10/04 4:2 p.m.125 views

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.3 security update on RHEL 7

New Red Hat Single Sign-On 7.5.3 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS7.2AI score0.63211EPSS
SaveExploits5References9
RedHat Linux
RedHat Linux
added 2022/10/04 3:53 p.m.78 views

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.3 security update

A security update is now available for Red Hat Single Sign-On 7.5 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS7.2AI score0.63211EPSS
SaveExploits5References10
RedHat Linux
RedHat Linux
added 2022/10/04 3:35 p.m.61 views

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.3 security update on RHEL 8

New Red Hat Single Sign-On 7.5.3 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS7.2AI score0.63211EPSS
SaveExploits5References9
OSV
OSV
added 2022/10/03 12:0 a.m.18 views

GHSA-JJJH-JJXP-WPFF Uncontrolled Resource Consumption in Jackson-databind

In FasterXML jackson-databind 2.4.0-rc1 until 2.12.7.1 and in 2.13.x before 2.13.4.2 resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled. This was patched in 2.12.7.1,...

7.5CVSS6.9AI score0.02766EPSS
SaveExploits2References18
OSV
OSV
added 2022/10/03 12:0 a.m.6 views

GHSA-RGV9-Q543-RQG4 Uncontrolled Resource Consumption in FasterXML jackson-databind

In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer.deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the UNWRAPSINGLEVALUEARRAYS feature is explicitly...

8.2CVSS6.9AI score0.02766EPSS
SaveExploits1References12
OSV
OSV
added 2022/10/02 5:15 a.m.5 views

DEBIAN-CVE-2022-42003

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled...

7.5CVSS6.5AI score0.02766EPSS
SaveExploits2References1
OSV
OSV
added 2022/10/02 5:15 a.m.11 views

UBUNTU-CVE-2022-42003

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled...

7.5CVSS6.8AI score0.02766EPSS
SaveExploits2References6
ATTACKERKB
ATTACKERKB
added 2022/10/02 5:15 a.m.5 views

CVE-2022-42003

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled...

7.5CVSS6.7AI score0.02766EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
added 2022/10/02 12:0 a.m.12 views

PT-2022-6920

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.4.0-rc1 through 2.12.7.1 FasterXML jackson-databind versions 2.13.x through 2.13.4.1 Bamboo Data Center and Server versions 9.1.0 through 9.2.4 Bamboo Data Center and Server versions 9.3.0 through 9.3.2...

7.8CVSS6.5AI score0.02766EPSS
SaveExploits2References71
OSV
OSV
added 2022/09/30 12:0 a.m.31 views

GHSA-5MQQ-7G25-R4WX FeehiCMS vulnerable to Cross-Site scripting via crafted payload

FeehiCMS versions 2.0.1.1 and prior contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module. There are no patches and no known workarounds for this issue...

5.4CVSS5.2AI score0.00437EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/09/30 12:0 a.m.37 views

FeehiCMS vulnerable to Cross-Site scripting via crafted payload

FeehiCMS versions 2.0.1.1 and prior contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module. There are no patches and no known workarounds for this issue...

5.4CVSS4.9AI score0.00437EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.10 views

WithSecure Endpoint Protection 安全漏洞

WithSecure Endpoint Protection is a cloud-native, AI-powered endpoint protection from Finland's WithSecure. It can be deployed instantly from a browser and easily managed from a single console. A security vulnerability exists in WithSecure Endpoint Protection. An attacker exploited the...

7.5CVSS7.4AI score0.00394EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/09/30 12:0 a.m.55 views

FeehiCMS Cross-Site Scripting Vulnerability

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

5.4CVSS2.8AI score0.00437EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/29 2:15 p.m.20 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS0.00437EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/29 2:15 p.m.20 views

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

4.9CVSS5.2AI score0.00437EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/09/29 1:33 p.m.24 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5.3AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/09/29 1:33 p.m.7 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.3AI score0.00437EPSS
SaveExploits1References1
Rows per page
Query Builder