PT-2022-24204 · Serv-U · Serv-U

Name of the Vulnerable Software and Affected Versions: Serv-U versions 15.3.0 through 15.3.1 Description: This issue affects the directory creation function in the web client. Recommendations: For Serv-U versions 15.3.0 through 15.3.1, consider restricting access to the directory creation functio...

CVE-2022-38106 Cross-Site Scripting Vulnerability in Serv-U Web Client

This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function...

CVE-2022-41559

The CVE-2022-41559 vulnerability affects TIBCO Nimbus Web Client (Nimbus 10.5.0). It is an open redirect that can be exploited by an unauthenticated attacker with network access, with human interaction required for exploitation. The issue’s impact is described as requiring user interaction and en...

CVE-2022-41559 TIBCO Nimbus Open Redirect Vulnerability

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from ...

CVE-2022-41559: URL Redirection to Untrusted Site

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from ...

CVE-2022-41559

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from ...

CVE-2022-41560

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software...

CVE-2022-41559

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from ...

CVE-2022-41560

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software...

TIBCO Software Nimbus 输入验证错误漏洞

TIBCO Software Nimbus is a business application for process documentation from TIBCO Software, USA. A security vulnerability exists in TIBCO Software Nimbus version 10.5.0, which stems from a problem with the Web Client component that allows an unauthenticated attacker with network access...

TIBCO Software Nimbus 安全漏洞

TIBCO Software Nimbus is a business application for process documentation from TIBCO Software, USA. A security vulnerability in TIBCO Software Nimbus version 10.5.0, which originates from a problem with the Web Client Upload Report Set component, allows a low-privileged attacker with network acce...

PT-2022-25937 · Tibco Software · Tibco Nimbus

Name of the Vulnerable Software and Affected Versions: TIBCO Nimbus version 10.5.0 Description: The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable issue that allows an unauthenticated attacker with network access to exploit an open redirect on the affect...

CVE-2022-40870

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header...

CVE-2022-40870

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header...

Design/Logic Flaw

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header...

The vulnerability of the web client of the legal system “Kodeks” relates to the failure to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the “Kodeks” reference-and-law system’s web client is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2022-40870

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via excess memory allocations through HttpClient. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

CVE-2022-41540

The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...

TP-LINK AX10 信任管理问题漏洞

The TP-LINK AX10 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AX10 version V12111117, which originates from the use of hard-coded encryption keys by web application clients when communicating with the router. An attacker could use this vulnerability to obtain...