12 matches found
EUVD-2019-8375
Malware in sbrugna...
CVE-2019-18657
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...
CVE-2022-29273
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters...
Design/Logic Flaw
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters...
CVE-2022-29273
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters...
CVE-2022-29273
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters...
CVE-2022-29273
CVE-2022-29273 affects pfSense CE up to version 2.6.0 and pfSense Plus up to 22.04/22.05; it enables cross-site scripting in the WebGUI via URL Table Alias URL parameters. The available connected docs confirm the flaw and affected versions; there are no explicit exploit details. Remediation prese...
PT-2023-12967 · Unknown · Pfsense Ce +1
Name of the Vulnerable Software and Affected Versions: pfSense CE versions 2.6.0 and earlier pfSense Plus versions prior to 22.05 Description: The issue allows for XSS in the WebGUI via URL Table Alias URL parameters. This means an attacker could potentially inject malicious scripts into the web...
ClickHouse HTTP header injection vulnerability
ClickHouse is a columnar open source database management system that allows real-time generation of reports on analyzed data. A security vulnerability exists in ClickHouse versions prior to 19.13.5.44. The vulnerability can be exploited to conduct HTTP header injection attacks via the url table...
CVE-2019-18657
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...
CVE-2019-18657
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...
CVE-2019-18657: Improper Neutralization of Special Elements in Output Used by a Downstream Component
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...