CVE-2021-32964

The CVE-2021-32964 issue affects AGG Software Web Server versions 4.0.40.1014 and earlier, enabling a path traversal vulnerability that may allow an attacker to read arbitrary files from the file system. Public sources confirm the affected product and vulnerability class (path traversal, CWE-23),...

CSRF vulnerability in Jenkins Mantis Plugin

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...

Jenkins RapidDeploy Plugin missing permission check

A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

GHSA-WWRR-4JP4-58WG CSRF vulnerability in Jenkins Mantis Plugin

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...

GHSA-922H-8Q8G-W7FX Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin

A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server...

Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin

A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server...

Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents...

Dolibarr ERP and CRM Code Injection

Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the sam...

GHSA-JWG3-V9XM-V6Q9 Dolibarr ERP and CRM Code Injection

Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the sam...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 V1.0 V15.03.02.196318 and AC9 V3.0 V15.03.06.42multi versions, which originates from a buffer overflow issue in the web server httpd. When setting up a virtual service, the httpd program will crash and...

PT-2022-10165 · Agg · Agg Software Web Server

Name of the Vulnerable Software and Affected Versions: AGG Software Web Server versions 4.0.40.1014 and prior Description: The issue allows an attacker to perform a path traversal attack, potentially enabling them to read arbitrary files from the file system. Recommendations: For AGG Software Web...

CVE-2020-24916

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection...

CVE-2018-10857

git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN...

CVE-2019-20798

An XSS issue was discovered in handlerserverinfo.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and...

CVE-2022-29876

A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-22776

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using...

CVE-2022-22777

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the...