CVE-2023-23759

There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process impact is limited to...

Design/Logic Flaw

There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process impact is limited to...

io.jenkins.plugins:amqp-build-trigger (1.0) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.12.2)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.plugins:amqp-build-trigger 1.0 Source cves: CVE-2023-32977...

DEBIAN-CVE-2023-31622

An issue in the sqlcmakepolicytrig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

UBUNTU-CVE-2023-31622

An issue in the sqlcmakepolicytrig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2022-46378

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs wh...

SEO ALert <= 1.59 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Go to Vanilla Beans » SEO Alert. 2. In "Slack...

VulnCheck KEV: CVE-2023-24055

KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has...

CVE-2022-37306

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

Cross site scripting

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

CVE-2022-37306: Improper Neutralization of Input During Web Page Generation

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

Open-Xchange OX App Suite 跨站脚本漏洞

Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in versions prior to Open-Xchange OX App Suite 7.10.6-rev30 that stems from allowing XSS via an upsell trigger...

CVE-2022-37306

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

CVE-2022-37306

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

PT-2023-13526 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for XSS via an upsell trigger. Recommendations: For versions prior to 7.10.6-rev30, update to version 7.10.6-rev30 or later to resolve the issue...

CVE-2022-37306

OX App Suite (Open-Xchange) vulnerable before 7.10.6-rev30 to cross-site scripting via an upsell trigger. Affected file/component: OX App Suite web interface; root cause: improper sanitization in upsell-trigger handling leading to XSS. Versions prior to 7.10.6-rev30 are impacted; update to 7.10.6...

CVE-2022-37306

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...

Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.15 Multiple Vulnerabilities (CloudBees Security Advisory 2023-04-12)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.15. It is, therefore, affected by multiple vulnerabilities including the following: - Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask i.e....

GHSA-Q2FC-9WW2-GGFJ Jenkins Quay.io trigger Plugin webhook endpoint can be accessed without authentication

Jenkins Quay.io trigger Plugin provides a webhook endpoint at /quayio-webhook/ that can be used to trigger builds of jobs configured to use a specified repository. In Quay.io trigger Plugin 0.1 and earlier, this endpoint can be accessed without authentication. This allows unauthenticated attacker...

Jenkins Quay.io trigger Plugin Cross-site Scripting vulnerability

Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted Quay.io trigger webhook payloads...