Lucene search
+L
OsvMost viewed

1002910 matches found

OSV
OSV
added 2024/01/31 3:22 p.m.76 views

BIT-LIFERAY-2021-38263

Cross-site scripting XSS vulnerability in the Server module's script console in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 20 and 7.2 before fix pack 10 allows remote attackers to inject arbitrary web script or HTML via the output of a script...

6.1CVSS6AI score0.00878EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/24 8:54 p.m.76 views

GHSA-CWX6-4WMF-C6XV SQL Injection in Admin download files as zip

Summary The application allows to create zip files from available files on the site. The parameter "selectedIds", is susceptible to SQL Injection. Details downloadAsZipJobsAction escape parameters, but downloadAsZipAddFilesAction not. The following code should be added: foreach $selectedIds as...

8.8CVSS9.2AI score0.00997EPSS
SaveExploits1References7
OSV
OSV
added 2024/01/03 4:15 p.m.76 views

UBUNTU-CVE-2024-21908

TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser...

6.1CVSS6AI score0.01066EPSS
SaveExploits1References6
OSV
OSV
added 2023/12/15 3:30 p.m.76 views

GHSA-QG44-XQWJ-WC28 Apache StreamPark: Authenticated system users could trigger remote command execution

In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on the compilation parameters of Maven. allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in...

7.2CVSS7.1AI score0.02299EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/07 6:30 a.m.76 views

GHSA-VWHF-3V6X-WFF8 Cross-site Scripting (XSS) in MLflow

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

6.5CVSS5.8AI score0.01662EPSS
SaveExploits1References5
OSV
OSV
added 2023/11/30 7:15 a.m.76 views

PYSEC-2023-250

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request e.g. to insert a new header or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the...

5.3CVSS5.1AI score0.00882EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/24 2:0 a.m.76 views

GHSA-3PX7-JM2P-6H2C encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs

Impact The length of URIs and the various parts eg path segments, query parameters is usually limited by the webserver processing the incoming request. In the case of Puma the defaults are : - path segment length: 8192 - Max URI length: 1024 12 - Max query length: 1024 10 See...

7.5CVSS7.3AI score0.01112EPSS
SaveExploits1References5
OSV
OSV
added 2023/10/10 6:28 p.m.76 views

GHSA-MJ24-GPW7-23M9 Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Impact ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the testitem.path field is exceeded the allowable "ltree" field type indexing limit path length=120 approximately, recursive nesting of the nested steps...

6.5CVSS6.3AI score0.00511EPSS
SaveExploits0References5
OSV
OSV
added 2023/09/28 4:26 p.m.76 views

GHSA-GVRG-62JP-RF7J PrestaShop allows employee without any access rights to list all installed modules

Impact In BO, an employee can list all modules without any access rights: method ajaxProcessGetPossibleHookingListForModule doesn't check access rights Patches Fixed on 8.1.2 Workarounds References...

4.3CVSS4.5AI score0.00394EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/24 1:23 a.m.76 views

CVE-2023-32559

A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API process.binding can bypass the policy mechanism by requiring internal modules and eventually take advantage of process.binding'spawnsyn...

7.5CVSS7.3AI score
SaveExploits0References5
OSV
OSV
added 2023/07/20 2:54 p.m.76 views

GHSA-HHR9-RH25-HVF9 Feathers socket handler allows abusing implicit toString

Impact Feathers socket handler did not catch invalid string conversion errors like: ts const message = $ toString: '' Causing the NodeJS process to crash when sending an unexpected Socket.io message like ts socket.emit'find', toString: '' Patches A fix has been released in - v5.0.8 via 3241 -...

7.5CVSS7.5AI score0.01188EPSS
SaveExploits1References9
OSV
OSV
added 2023/05/12 8:21 p.m.76 views

GHSA-6R8Q-PFPV-7CGJ Vyper vulnerable to integer overflow in loop

Impact Due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. In the following example, calling test returns 354, meaning that the variable a did store 354 a value out of bound for the type uint8. Vyp...

8.7CVSS5.9AI score0.00913EPSS
SaveExploits1References5
OSV
OSV
added 2023/05/11 8:47 p.m.76 views

GHSA-WC64-C5RV-32PF in-toto vulnerable to Configuration Read From Local Directory

Impact The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification 1. Among the files read is .intotorc which is a hidden file in the directory in which in-tot...

5.5CVSS5.5AI score0.00241EPSS
SaveExploits0References8
OSV
OSV
added 2023/04/24 9:30 a.m.76 views

GHSA-4R6H-8V6P-XVW6 Prototype Pollution in sheetJS

All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files for example, exporting data to spreadsheet files are unaffected. A non-vulnerable version cannot be found via npm, as the repository...

7.8CVSS7.8AI score0.00988EPSS
SaveExploits1References7
OSV
OSV
added 2023/03/15 11:15 p.m.76 views

UBUNTU-CVE-2023-28099

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, if dsisinlist is used with an invalid IP address string NULL is illegal input, OpenSIPS will attempt to print a string from a random address stack garbage, which could lead to a crash. All user...

7.5CVSS5.8AI score0.00905EPSS
SaveExploits0References5
OSV
OSV
added 2023/03/10 3:30 p.m.76 views

GHSA-JX2X-FG9P-7GC7 Funadmin vulnerable to SQL injection

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php...

9.8CVSS9.8AI score0.00877EPSS
SaveExploits2References3
OSV
OSV
added 2023/03/03 3:30 a.m.76 views

GHSA-P8CQ-PV6W-6RWX Cockpit Uses Platform-Dependent Third Party Components

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit 2.3.9 and prior. A patch is available and anticipated to be part of version 2.4.0...

5.5CVSS4.9AI score0.00349EPSS
SaveExploits1References4
OSV
OSV
added 2023/02/13 8:49 p.m.76 views

CVE-2023-25572 React-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...

5.4CVSS5.3AI score
SaveExploits0References7
OSV
OSV
added 2023/01/30 12:30 a.m.76 views

GHSA-W7W4-QJGG-372X Froxlor contains Static Code Injection

Static Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...

4.8CVSS5.8AI score0.00439EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/10 12:0 a.m.76 views

DSA-5313-1 hsqldb - security update

Bulletin has no description...

9.8CVSS8.7AI score0.03888EPSS
SaveExploits1
OSV
OSV
added 2022/12/28 3:30 p.m.76 views

GHSA-F83P-PG86-P922 usememos/memos has Insufficient Granularity of Access Control

usememos/memos 0.9.0 and prior allows an attacker to archive any user's public or private post...

5.3CVSS5.5AI score0.00681EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/15 9:30 p.m.76 views

GHSA-J34R-57XJ-PFM5 WSO2 carbon-registry Cross-site Scripting vulnerability

A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file components/registry/org.wso2.carbon.registry.search.ui/src/main/resources/web/search/advancedSearchForm-ajaxprocessor.jsp of the...

6.1CVSS4.7AI score0.00653EPSS
SaveExploits1References6
OSV
OSV
added 2022/11/27 3:30 a.m.76 views

GHSA-22VC-5PGW-644Q KubeView vulnerable to full cluster takeover due to improper authentication

KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side projec...

9.8CVSS9.5AI score0.51696EPSS
SaveExploits1References3
OSV
OSV
added 2022/11/21 11:59 p.m.76 views

GHSA-QW4W-VQ8V-2WCV Stored XSS using uppercase characters in HTMLEditor

A malicious content author could add a Javascript payload to the href attribute of a link. A similar issue was identified and fixed via CVE-2022-28803. However, the fix didn't account for the casing of the href attribute. An attacker must have access to the CMS to exploit this issue...

5.4CVSS5.2AI score0.00516EPSS
SaveExploits0References6
OSV
OSV
added 2022/10/06 10:58 p.m.76 views

GHSA-GR7W-X2JP-3XGW Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication

Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode...

9.8CVSS9.7AI score0.02723EPSS
SaveExploits0References7
OSV
OSV
added 2022/08/06 5:29 a.m.76 views

GHSA-P6MM-27GQ-9V3P next-auth before v4.10.2 and v3.29.9 leaks excessive information into log

Impact An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log which is thrown during OAuth error handling and use it to leverage further attacks o...

3.3CVSS3.6AI score0.00256EPSS
SaveExploits0References6
OSV
OSV
added 2022/07/21 10:33 p.m.76 views

GHSA-4G63-C64M-25W9 OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers

Impact SignatureChecker.isValidSignatureNow is not expected to revert. However, an incorrect assumption about Solidity 0.8's abi.decode allows some cases to revert, given a target contract that doesn't implement EIP-1271 as expected. The contracts that may be affected are those that use...

7.5CVSS7.4AI score0.00478EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/15 7:14 p.m.76 views

GHSA-376V-XGJX-7MFR fastify-bearer-auth vulnerable to Timing Attack Vector

Impact fastify-bearer-auth does not securely use crypto.timingSafeEqual. A malicious attacker could estimate the length of one valid bearer token. According to the corresponding RFC 6750, the bearer token has only base64 valid characters, reducing the range of characters for a brute force attack...

7.5CVSS7.4AI score0.01422EPSS
SaveExploits0References7
OSV
OSV
added 2022/07/15 3:28 p.m.76 views

GHSA-RPXG-HG79-H8Q9 SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3...

9.8CVSS9.9AI score0.26461EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/17 8:51 p.m.76 views

GHSA-HPRF-RRWQ-JM5C Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0

Impact The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created or overwritten using Rundeck 4.2.0 or 4.2.1 might result in them being written in plaintex...

7.5CVSS7.7AI score0.00648EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/11 12:0 a.m.76 views

GHSA-5F47-RCG5-9M24 Directory traversal in convert-svg-core

The package convert-svg-core before 0.6.4 is vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is possible by using a specially crafted SVG file...

7.5CVSS9.3AI score0.02117EPSS
SaveExploits1References6
OSV
OSV
added 2022/06/11 12:0 a.m.76 views

DSA-5161-1 linux - security update

Bulletin has no description...

8.2CVSS6.9AI score0.03865EPSS
SaveExploits7
OSV
OSV
added 2022/05/24 5:46 p.m.76 views

GHSA-XHC3-5PGF-P576 subrion CMS Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...

6.1CVSS6AI score0.01009EPSS
SaveExploits1References4
OSV
OSV
added 2022/05/24 5:35 p.m.76 views

GHSA-QXM5-VX5J-PP6W snapcraft Access Restriction Bypass

In some conditions, a snap package built by snapcraft includes the current directory in LDLIBRARYPATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to...

6.8CVSS6.8AI score0.00673EPSS
SaveExploits1References7
OSV
OSV
added 2022/05/24 5:2 p.m.76 views

GHSA-JF86-9434-F8C2 Keycloak Authentication Error

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server ldaps, in this case user authentication succeeds even if invalid password has entered...

9.8CVSS9.7AI score0.01054EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 4:47 p.m.76 views

GHSA-G6H2-4X64-C59X Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

An XML external entities XXE vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side...

7.5CVSS5.9AI score0.01999EPSS
SaveExploits0References8
OSV
OSV
added 2022/05/21 12:0 a.m.76 views

GHSA-77FQ-4XF5-HPH4 Buffer overflow in wasm3

WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm...

7.8CVSS7.7AI score0.0039EPSS
SaveExploits1References6
OSV
OSV
added 2022/05/14 1:28 a.m.76 views

GHSA-X5QJ-9VMX-7G6G Improper Input Validation in .Net Framework API's

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'...

5.9CVSS6.8AI score0.04518EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/13 1:37 a.m.76 views

GHSA-M833-87VF-576C ovirt-engine Logs Plaintext Passwords To File

ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to...

6.6CVSS6.3AI score
SaveExploits0References6
OSV
OSV
added 2022/04/14 12:0 a.m.76 views

GHSA-F37Q-Q7P2-CCFC Resource exhaustion in Mattermost

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

6.5CVSS5.1AI score0.00903EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/02 12:0 a.m.76 views

GHSA-G397-V4W5-4M79 Command injection in cocoapods-downloader

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function when using hg, the url and/or revision, tag, branch is passed to the hg clone command in a way that additional flags can be set. The additional flags can...

8.1CVSS9.9AI score0.01781EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/30 12:0 a.m.76 views

GHSA-RWG2-W82X-V57J XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for...

7.1CVSS8AI score0.00788EPSS
SaveExploits0References4
OSV
OSV
added 2022/03/16 12:0 a.m.76 views

GHSA-X3MH-JVJW-3XWX openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

7.5CVSS7.7AI score0.73188EPSS
SaveExploits2References37
OSV
OSV
added 2022/02/01 12:43 a.m.76 views

GHSA-99CG-575X-774P Go-Attestation Improper Input Validation with attacker-controlled TPM Quote

Impact An improper input validation vulnerability in go-attestation before 0.4.0 allows local users to provide a maliciously-formed Quote over no/some PCRs, causing AKPublic.Verify to succeed despite the inconsistency. Subsequent use of the same set of PCR values in Eventlog.Verify lacks the...

4CVSS3.7AI score0.00096EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/27 4:21 p.m.76 views

GHSA-7G7R-GR46-Q4P5 Cross-Site Request Forgery in yetiforce

Versions of yetiforce 6.3.0 and prior are subject to privilege escalation via a cross site request forgery bug. This allows an attacker to create a new admin account even with SameSite: Strict enabled. This vulnerability can be exploited by any user on the system including guest users...

8CVSS7.8AI score0.00531EPSS
SaveExploits1References4
OSV
OSV
added 2021/12/07 12:0 a.m.76 views

GHSA-QRVJ-274H-HFCG Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score0.02407EPSS
SaveExploits1References3
OSV
OSV
added 2021/11/23 6:17 p.m.76 views

GHSA-C6J7-4FR9-C76P Incorrect permissions in Apache Ozone

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block...

6.5CVSS6.4AI score0.01501EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/08 11:8 p.m.76 views

GHSA-378P-HRQ3-X4P3 Cross-site scripting in Shopizer

A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...

4.8CVSS4.8AI score0.02916EPSS
SaveExploits2References4
OSV
OSV
added 2021/05/18 9:7 p.m.76 views

GHSA-3X58-XR87-2FCJ Cross-site scripting in bluemonday

bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string...

6.1CVSS5.9AI score0.00929EPSS
SaveExploits0References8
OSV
OSV
added 2021/05/17 9:0 p.m.76 views

GHSA-FW2F-7F87-5R6C Improper Input Validation in access-policy

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

9.8CVSS6AI score0.02512EPSS
SaveExploits1References2
Total number of security vulnerabilities5000