CVE-2025-24297

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal...

nossrf 安全漏洞

nossrf is a Snyk open source package. A security vulnerability exists in versions prior to nossrf 1.0.4 that stems from an attacker being able to bypass SSRF protection mechanisms by providing hostnames that resolve to local or reserved IP address spaces...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.19.0 release

Red Hat OpenShift Dev Spaces 3.19 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

SUSE CVE-2024-5585

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

CVE-2024-12756

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user...

CVE-2024-12755

A Cross-Site Scripting XSS vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information...

CVE-2024-12756

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user...

CVE-2024-12755

A Cross-Site Scripting XSS vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information...

CVE-2024-12756

CVE-2024-12756 concerns an HTML Injection vulnerability in Avaya Spaces. The available sources indicate that the affected product is Avaya Spaces and the issue enables possible disclosure of sensitive information or modification of page content viewed by users. The reports describe the vulnerabil...

CVE-2024-12756 Avaya Spaces HTML injection (HTMLi) Vulnerability

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user...

CVE-2024-12756 Avaya Spaces HTML injection (HTMLi) Vulnerability

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user...

CVE-2024-12755 Avaya Spaces XSS Vulnerability

A Cross-Site Scripting XSS vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information...

CVE-2024-12755 Avaya Spaces XSS Vulnerability

A Cross-Site Scripting XSS vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information...

CVE-2024-12755

Technical details (affected versions, root cause, patch status) are not provided in the connected documents; monitor for updates from Avaya and security bulletins.

Avaya Spaces 安全漏洞

Avaya Spaces is a cloud-based team collaboration tool from Avaya. A security vulnerability exists in Avaya Spaces. An attacker exploiting the vulnerability could execute code or disclose sensitive information...

Avaya Spaces 安全漏洞

Avaya Spaces is a cloud-based team collaboration tool from Avaya. A security vulnerability exists in Avaya Spaces. An attacker exploiting the vulnerability could modify page content or disclose sensitive information...

PT-2025-6267 · Avaya · Avaya Spaces

Name of the Vulnerable Software and Affected Versions: Avaya Spaces affected versions not specified Description: A Cross-Site Scripting XSS issue may have allowed unauthorized code execution and potential disclosure of sensitive information. Recommendations: At the moment, there is no information...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release

Red Hat OpenShift Dev Spaces 3.18 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

BIT-PHP-MIN-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release

Red Hat OpenShift Dev Spaces 3.17 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. This includes fixes to Critical CVE-2024-21534. Following the Red Hat Product Security standards this update is rated as having a security impact of...