Lucene search
+L
OsvMost viewed

2101918 matches found

OSV
OSV
added 2023/04/12 8:38 p.m.80 views

GHSA-C885-89FW-55QR org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability

Impact The RSS macro that is bundled in XWiki included the content of the feed items without any cleaning in the HTML output when the parameter content was set to true. This allowed arbitrary HTML and in particular also JavaScript injection and thus cross-site scripting XSS by specifying an RSS...

9CVSS8.9AI score0.01393EPSS
SaveExploits1References5
OSV
OSV
added 2023/04/12 6:30 p.m.80 views

GHSA-GH5W-GFFH-68PR Jenkins Lucene-Search Plugin vulnerable to Cross-Site Request Forgery

Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to reindex the database...

4.3CVSS4.8AI score0.00349EPSS
SaveExploits0References5
OSV
OSV
added 2023/04/02 9:30 p.m.80 views

GHSA-7C44-M589-36W7 Jenkins Convert To Pipeline Plugin vulnerable to command injection

Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations. This allows attackers able to configure Freestyle projects to prepare a crafted...

8CVSS9.3AI score0.00779EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/10 9:30 p.m.80 views

GHSA-PQG3-XFX2-FMQP Cross site scripting vulnerability in update-center2

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide a plugin for hosting...

6.1CVSS8.6AI score0.01541EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/10 3:30 p.m.80 views

GHSA-JX2X-FG9P-7GC7 Funadmin vulnerable to SQL injection

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php...

9.8CVSS9.8AI score0.00877EPSS
SaveExploits2References3
OSV
OSV
added 2023/03/07 12:30 a.m.80 views

GHSA-J9CW-5CPJ-9QJ5 Moodle has a Hidden Functionality vulnerability

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk...

5.3CVSS5.3AI score0.00526EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/23 9:30 p.m.80 views

GHSA-C57V-HC7M-8PX2 Cross-site Scripting in Quarkus

If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature...

6.1CVSS5.7AI score0.0055EPSS
SaveExploits0References4
OSV
OSV
added 2023/02/13 8:49 p.m.80 views

CVE-2023-25572 React-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...

5.4CVSS5.3AI score
SaveExploits0References7
OSV
OSV
added 2023/02/07 6:16 p.m.80 views

GHSA-56GJ-MVH6-RP75 URI validation failure on SVG parsing. Bypass of CVE-2023-23924

Summary Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Details Dompdf parses the href attribute of image tags with the following code: src/Image/Cache.php line 135-150 php function $parser, $name,...

10CVSS9.5AI score0.0249EPSS
SaveExploits3References4
OSV
OSV
added 2023/01/27 12:30 p.m.80 views

GHSA-3G5W-6PW7-6HRP Path Traversal In Eclipse GlassFish

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed...

6.5CVSS6.8AI score0.00935EPSS
SaveExploits0References3
OSV
OSV
added 2023/01/22 3:30 a.m.80 views

GHSA-X9VC-5Q77-M7X4 Improper Input Validation in pyload-ng

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS6.3AI score0.00823EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/03 5:15 p.m.80 views

UBUNTU-CVE-2021-32821

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS7.1AI score0.00644EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/20 9:30 p.m.80 views

GHSA-9P8J-HRGF-JC2G Apache Zeppelin Cross-site Scripting vulnerability

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported...

5.4CVSS5.8AI score0.01118EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/12 6:15 p.m.80 views

PYSEC-2022-43002

Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2...

9.8CVSS6.9AI score0.00819EPSS
SaveExploits1References5
OSV
OSV
added 2022/12/12 2:38 p.m.80 views

GHSA-J8X2-2M5W-J939 Amazon CloudWatch Agent for Windows has Privilege Escalation Vector

Impact A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM permissions. Users with administrative access to affected hosts may use this to create a...

7.1CVSS6.9AI score0.00504EPSS
SaveExploits0References5
OSV
OSV
added 2022/11/21 11:59 p.m.80 views

GHSA-QW4W-VQ8V-2WCV Stored XSS using uppercase characters in HTMLEditor

A malicious content author could add a Javascript payload to the href attribute of a link. A similar issue was identified and fixed via CVE-2022-28803. However, the fix didn't account for the casing of the href attribute. An attacker must have access to the CMS to exploit this issue...

5.4CVSS5.2AI score0.00551EPSS
SaveExploits0References6
OSV
OSV
added 2022/11/21 10:28 p.m.80 views

GHSA-3FJJ-P79J-C9HH Fastify: Incorrect Content-Type parsing can lead to CSRF attack

Impact The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could potentially be used to invoke routes that only accepts application/js...

4.2CVSS5.9AI score0.00401EPSS
SaveExploits0References5
OSV
OSV
added 2022/11/14 4:15 p.m.80 views

DEBIAN-CVE-2022-45136

Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerable to this class of attack. As a resu...

9.8CVSS8.2AI score0.01626EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/02 7:00 p.m.80 views

GHSA-F9FQ-78CH-4WMJ Apache Airflow Open Redirect vulnerability

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...

6.1CVSS6AI score0.01593EPSS
SaveExploits0References6
OSV
OSV
added 2022/10/23 12:00 a.m.80 views

DSA-5257-2 linux - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/21 12:00 a.m.80 views

GHSA-232P-59MG-F98P Microweber Cross-site Scripting can result in redirection to a malicious site

Microweber versions 1.3.1 and prior are vulnerable to HTML injection that an attacker can use to redirect someone to a malicious site. A patch is available at commit 68f0721571653db865a5fa01c7986642c82e919c and expected to be part of version 1.3.2...

6.1CVSS6.2AI score0.01946EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/16 7:28 p.m.80 views

GHSA-28M8-9J7V-X499 Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links

Impact Due to missing canonicalization when readDir is called recursively, it was possible to display directory listings outside of the defined fs scope. This required a crafted symbolic link or junction folder inside an allowed path of the fs scope. No arbitrary file content could be leaked...

5.8CVSS6.5AI score0.00998EPSS
SaveExploits1References9
OSV
OSV
added 2022/08/31 9:27 p.m.80 views

GHSA-PRRH-QVHF-X788 PrestaShop Product Comments Cross-site Scripting vulnerability

Impact An attacker could steal an admin's cookie Patches The issue is fixed in 5.0.2 References Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS5AI score0.00549EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/06 5:20 a.m.80 views

GHSA-QRJV-RF5Q-QPXC Rust-WebSocket memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

7.5CVSS7.4AI score0.01824EPSS
SaveExploits0References7
OSV
OSV
added 2022/08/02 12:00 a.m.80 views

GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.5AI score0.00902EPSS
SaveExploits1References6
OSV
OSV
added 2022/07/06 12:00 a.m.80 views

DSA-5178-1 intel-microcode - security update

Bulletin has no description...

5.5CVSS7AI score0.06451EPSS
SaveExploits0
OSV
OSV
added 2022/06/17 8:51 p.m.80 views

GHSA-HPRF-RRWQ-JM5C Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0

Impact The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created or overwritten using Rundeck 4.2.0 or 4.2.1 might result in them being written in plaintex...

7.5CVSS7.7AI score0.00667EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/24 5:45 p.m.80 views

GHSA-263Q-5PJ7-J6HJ CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

A cross-site request forgery CSRF vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.8CVSS8.7AI score0.00839EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 5:32 p.m.80 views

GHSA-WPMR-Q825-X4C6 aptdaemon Information Disclosure via Improper Input Validation in Transaction class

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

4CVSS3.8AI score0.0049EPSS
SaveExploits1References6
OSV
OSV
added 2022/05/24 5:27 p.m.80 views

GHSA-V46Q-XJP5-7P6R Stored XSS vulnerability in Jenkins Cadence vManager Plugin

Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission. Cadence vManager Plugin 3.0.5 removes affected tooltips...

8CVSS5.2AI score0.00753EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 5:02 p.m.80 views

GHSA-JF86-9434-F8C2 Keycloak Authentication Error

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server ldaps, in this case user authentication succeeds even if invalid password has entered...

9.8CVSS9.7AI score0.01054EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 4:47 p.m.80 views

GHSA-JJGH-M322-FJX6 Openstack Octavia Access Control Vulnerability

Description An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if...

5.5CVSS7.6AI score0.01433EPSS
SaveExploits0References12
OSV
OSV
added 2022/05/18 12:00 a.m.80 views

GHSA-5PMP-7WC9-V7VW Cross-site Scripting in Jenkins JDK Parameter Plugin

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

8CVSS5.8AI score0.00774EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/17 4:17 a.m.80 views

GHSA-FMMQ-J7PQ-F85C JRuby denial of service via Hash Collision

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS5.1AI score0.02249EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/17 12:00 a.m.80 views

DLA-3012-1 libxml2 - security update

Bulletin has no description...

6.5CVSS6.9AI score0.03753EPSS
SaveExploits5
OSV
OSV
added 2022/05/14 3:49 a.m.80 views

GHSA-M98Q-P5GQ-Q5FF eZ Publish Cross-site Scripting (XSS) vulnerability

eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12.0 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...

6.1CVSS6.1AI score0.00679EPSS
SaveExploits0References5
OSV
OSV
added 2022/04/28 5:13 p.m.80 views

GHSA-RVJG-GXWX-J5GF OIDC Logout redirect in keycloak

A flaw was found in keycloak. The OIDC logout endpoint does not have CSRF protection. The highest threat from this vulnerability is to system availability...

3.3CVSS3.5AI score0.00211EPSS
SaveExploits0References5
OSV
OSV
added 2022/04/22 12:00 a.m.80 views

GHSA-QF9Q-Q4HH-QPH3 SQL injection in blazer

Blazer before 2.6.0 allows SQL Injection. In certain circumstances, an attacker could get a user to run a query they would not have normally run...

7.5CVSS7.5AI score0.00892EPSS
SaveExploits0References6
OSV
OSV
added 2022/03/22 12:00 a.m.80 views

DLA-2961-1 thunderbird - security update

Bulletin has no description...

9.6CVSS7.2AI score0.00931EPSS
SaveExploits4
OSV
OSV
added 2022/03/10 6:02 p.m.80 views

GHSA-83VP-6JQG-6CMR Incorrect Authentication in shopware

Impact Modify Customers, create Orders without App Permission Patches We recommend updating to the current version 6.4.8.2. You can get the update to 6.4.8.2 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For older...

6.8CVSS6.9AI score0.00759EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/10 5:55 p.m.80 views

GHSA-6WRH-279J-6HVW HTTP caching is marking private HTTP headers as public in Shopware

Impact HTTP caching is marking private HTTP headers as public Patches Fixed in recommend updating to the current version 6.4.8.2. You can get the update to 6.4.8.2 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For...

6.3CVSS5.7AI score0.01097EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/09 12:00 a.m.80 views

GHSA-5RCC-6CMJ-7728 Cross-site Scripting in BookStack

Iframe tags don't have a sandbox attribute, this makes an attacker able to execute malicious javascript via an iframe and perform phishing attacks. The sandbox attribute will block script execution and prevents the content to navigate its top-level browsing context which will stop this type of...

5.4CVSS5.6AI score0.00782EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/20 12:00 a.m.80 views

GHSA-3P9J-442X-HJP7 Business Logic Errors in microweber

microweber prior to 1.2.11 allows multiple uses of a single-use coupon...

5.3CVSS5.1AI score0.01049EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/10 8:34 p.m.80 views

GHSA-P5CH-W78F-XH44 Cross-site scripting in @atlaskit/editor-core

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

5.4CVSS5.2AI score0.01126EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/26 10:13 p.m.80 views

GHSA-V82V-RQ72-PHQ9 Server side request forgery in @isomorphic-git/cors-proxy

The package @isomorphic-git/cors-proxy before 2.7.1 is vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...

8.6CVSS8AI score0.01389EPSS
SaveExploits1References4
OSV
OSV
added 2021/11/15 5:54 p.m.80 views

GHSA-844M-CPR9-JCMH Rails Multisite secure/signed cookies share secrets between sites in a multi-site application

Impact This vulnerability impacts any Rails applications using railsmultisite alongside Rails' signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different 'sites' within a multi-site Rails application...

6.2CVSS8.6AI score0.00628EPSS
SaveExploits0References5
OSV
OSV
added 2021/11/01 12:00 a.m.80 views

DSA-5000-1 openjdk-11 - security update

Bulletin has no description...

7.1CVSS6.4AI score0.159EPSS
SaveExploits0
OSV
OSV
added 2021/08/30 4:22 p.m.80 views

GHSA-6GVC-4JVJ-PWQ4 Duplicate Advisory: Use after free in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f56g-chqp-22m9. This link is maintained to preserve external references. Original Description An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a...

6.5CVSS6.3AI score0.00988EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/25 8:56 p.m.80 views

GHSA-6HFQ-H8HQ-87MF HTTP Request Smuggling in hyper

Summary hyper's HTTP server code had a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the request payload boundary different...

4.8CVSS8AI score0.04771EPSS
SaveExploits0References6
OSV
OSV
added 2021/08/25 8:52 p.m.80 views

GHSA-8FGG-5V78-6G76 Deserializing an array can free uninitialized memory in byte_struct

Bytestruct stack and unpack structure as raw bytes with packed or bit field layout. An issue was discovered in the bytestruct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics...

9.8CVSS9.5AI score0.01167EPSS
SaveExploits0References5
Total number of security vulnerabilities5000