PT-2025-4424

Name of the Vulnerable Software and Affected Versions SpeakOut! Email Petitions versions n/a through 4.4.2 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the hostname parameter, in the context of other users' sessions, by injecting...

PT-2023-31712 · Unknown · Englesystem

Name of the Vulnerable Software and Affected Versions: Englesystem versions prior to 3.4.1 Description: Englesystem is a shift planning system for chaos events. The system performed insufficient validation of user-supplied data for the DECT number, mobile number, and work-log comment fields. This...

DEBIAN-CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

PT-2017-8630

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.5 and earlier Description The issue allows remote attackers to enumerate user sessions. This can be achieved by sending a request to the "api/v11/users/sessions" endpoint. Recommendations For Cloudera Manager versio...

CVE-2016-4950: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions...