1233 matches found
CVE-2024-11922: Improper Neutralization of Input During Web Page Generation
Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or JavaScript into an email...
Rockwell Automation FactoryTalk Updater Web Client Detection
Binary data rockwellfactorytalkupdaterwebclientdetect.nbin...
SUSE CVE-2025-32911
A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...
SUSE CVE-2025-32914
A flaw was found in libsoup, where the soupmultipartnewfrommessage function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds...
UBUNTU-CVE-2025-32913
A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...
Malware in n11-web-client
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in n11-web-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 635a6c33b57671f2fb87f2c61834328fccebe10874b03573fbacc4b04c495fb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2560 Malicious code in n11-web-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 635a6c33b57671f2fb87f2c61834328fccebe10874b03573fbacc4b04c495fb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Zimbra Collaboration Server 安全漏洞
Zimbra Collaboration Server ZCS is an email and collaboration solution from Zimbra. The solution provides email, contacts, calendaring, file sharing, social networking, and other features. A security vulnerability exists in Zimbra Collaboration Server versions 9.0, 10.0, and 10.1, which stems fro...
CVE-2025-27915: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its...
CVE-2025-27915
An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its...
CVE-2025-27915
An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its...
CVE-2025-27915
Zimbra Collaboration Suite (ZCS) versions 9.0.0 Patch 39 , 10.0.x (prior to 10.0.13 ), and 10.1.x (prior to 10.1.5 ) are vulnerable to a stored cross-site scripting (XSS) vulnerability in the Classic Web Client . The root cause is the insufficient sanitization of HTML content in ICS files . An un...
CVE-2024-53408
AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2024-53408
AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting XSS vulnerability...
PT-2025-8983 · Unknown · Ave System Web Client
Name of the Vulnerable Software and Affected Versions: AVE System Web Client version 2.1.131.13992 Description: A cross-site scripting XSS issue was discovered. This issue allows for the execution of malicious scripts on the client-side, potentially leading to unauthorized access or data theft. N...
CVE-2024-53408
AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2024-53408
The AVE System Web Client version v2.1.131.13992 is susceptible to a cross-site scripting (XSS) vulnerability. This flaw allows for the execution of malicious scripts on the client-side, which could potentially lead to unauthorized access or data theft . While no specific patch version is current...
AVE System Web Client 跨站脚本漏洞
AVE System Web Client is an application from AVE System that is used to manage the entire AVE System. A security vulnerability exists in AVE System Web Client version v2.1.131.13992 that stems from the presence of cross-site scripting...
