3812 matches found
CVE-2021-32747
Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...
CVE-2021-32747
Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...
CVE-2021-32747: Exposure of Sensitive Information to an Unauthorized Actor
Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...
PT-2021-6529
Name of the Vulnerable Software and Affected Versions Icinga Web 2 versions 2.0.0 through 2.8.2 Description A vulnerability exists in Icinga Web 2 where custom variables are exposed to unauthorized users. Custom variables are user-defined keys and values on configuration objects in Icinga 2,...
CVE-2021-3314
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for...
CVE-2021-3314
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for...
GetSimple CMS Open Redirect Vulnerability (CNVD-2021-46556)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. An open redirect vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. An attacker can redirect a user to a url parameter via the redirect function...
GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2021-45752)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 5.3.2.8 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the url parameter in bbs/login.php...
Oracle GlassFish Server cross-site scripting vulnerabilities
Oracle GlassFish Server is an application from Oracle Corporation.Oracle GlassFish Server is built using the GlassFish Server Open Source Edition to provide a flexible, lightweight, and production-ready Java EE 6 application server. Oracle GlassFish Server suffers from a cross-site scripting...
Cross site scripting
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18661
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18661
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18661: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
Open redirect
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
PT-2021-10199
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS versions 3.3.15 and earlier Description: The issue is related to an open redirect in the admin/changedata.php file via the redirect function to the url parameter. This allows for potential redirection to unintended locations...