861 matches found
Jenkins Multiselect parameter Plugin 跨站脚本漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins Multiselect parameter Plugin 1.3 and earlier versions have a cross-si...
CVE-2022-27495
On all versions 1.3.x fixed in 1.4.0 NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Design/Logic Flaw
On all versions 1.3.x fixed in 1.4.0 NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Jenkins Pipeline Phoenix AutoTest Plugin 路径遍历漏洞
Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.Jenkins Pipeline Phoenix AutoTest Plugi 1.3 and earlier is vulnerable to a path traversal vulnerability that could be exploited by an attacker with Item/Configure...
Jenkins Pipeline Phoenix AutoTest Plugin 访问控制错误漏洞
Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.An access control error vulnerability exists in Jenkins Pipeline Phoenix AutoTest Plugin 1.3 and earlier, which stems from the plugin not performing permission check...
Apache APISIX 2.12.1 - Remote Code Execution Exploit
Exploit Title: Apache APISIX 2.12.1 - Remote Code Execution RCE Exploit Author: Ven3xy Vendor Homepage: https://apisix.apache.org/ Version: Apache APISIX 1.3 – 2.12.1 Tested on: CentOS 7 CVE : CVE-2022-24112 import requests import sys class color: HEADER = '\03395m' IMPORTANT = '\3335m' NOTICE =...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
Code injection
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
PT-2022-13509 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3 Description: The issue concerns static code injection in the microweber/microweber GitHub repository. Microweber is a content management system CMS that features drag and drop functionality...
CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...
Input validation
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...
GHSA-7R79-MRP6-8MHQ Rate limit missing in microweber
Microweber prior to version 1.3 does not rate limit password reset emails...
Rate limit missing in microweber
Microweber prior to version 1.3 does not rate limit password reset emails...
WordPress Google Sheet Connector for Easy Digital Downloads plugin <= 1.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Google Sheet Connector for Easy Digital Downloads plugin versions = 1.2. Solution Update the WordPress Google Sheet Connector for Easy Digital Downloads plugin to the latest available version at least 1.3...
GHSA-6M26-25Q2-CQ46 Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
CVE-2022-0762
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0763 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
GHSA-HJ8G-CW8X-2C6M Cross-site Scripting in Microweber
Microweber prior to version 1.3 is vulnerable to reflected cross-site scripting...