Lucene search
+L
OsvMost viewed

996107 matches found

OSV
OSV
added 2022/05/24 5:0 p.m.63 views

GHSA-JJMG-XMQ2-G6FF Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting XSS vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to the wysiwyg editor can abuse the blockDirective function and inject malicious javascript ...

4.8CVSS5.1AI score0.00591EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/24 4:55 p.m.63 views

GHSA-CJR8-5RW4-WH65 Jenkins Splunk Plugin Sandbox Bypass

Jenkins Splunk Plugin has a form validation HTTP endpoint used to validate a user-submitted Groovy script through compilation, which was not subject to sandbox protection. This allowed attackers with Overall/Read access to execute arbitrary code on the Jenkins controller by applying AST...

8.8CVSS9AI score0.01677EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 4:52 p.m.63 views

GHSA-JXG7-CGHF-MGGX Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

VMware Lab Manager Slaves Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. As of publication of this advisory, there is no fix...

6.5CVSS6.5AI score0.00841EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/24 4:52 p.m.63 views

GHSA-862J-CV9P-6HPF Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability

Codefresh Integration Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. As of publication of this advisory, there is no fix...

6.5CVSS7.6AI score0.01117EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/24 4:52 p.m.63 views

GHSA-VVF9-FXHV-4RGJ Magento 2 Community Edition RCE

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates...

7.2CVSS7.5AI score0.01921EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/24 12:0 a.m.63 views

DSA-5146-1 puma - security update

Bulletin has no description...

9.1CVSS6.7AI score0.0214EPSS
SaveExploits0
OSV
OSV
added 2022/05/20 12:0 a.m.63 views

DLA-3016-1 rsyslog - security update

Bulletin has no description...

8.1CVSS8AI score0.03933EPSS
SaveExploits1
OSV
OSV
added 2022/05/17 5:25 a.m.63 views

GHSA-Q7V2-W38R-PV7V phpMyAdmin Multiple XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations 1 TRUNCATE or 2 DROP link for a crafted table name, 3 the Add Trigger popup within a Triggers page that references...

3.5CVSS5.9AI score0.00819EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/17 4:45 a.m.63 views

GHSA-9CRX-P357-5VW8 Ajenti Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

5.4CVSS5.3AI score0.01499EPSS
SaveExploits1References9
OSV
OSV
added 2022/05/17 4:17 a.m.63 views

GHSA-FMMQ-J7PQ-F85C JRuby denial of service via Hash Collision

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS5.1AI score0.02249EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/17 3:44 a.m.63 views

GHSA-Q73F-VJC2-3GQF OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file

The import task action in OpenStack Image Service Glance 2015.1.x before 2015.1.2 kilo, when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image...

7.1CVSS5.8AI score0.01499EPSS
SaveExploits0References11
OSV
OSV
added 2022/05/14 3:23 a.m.63 views

GHSA-726G-CGCQ-4XW8 Dolibarr Cross-Site Scripting (XSS) vulnerability

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

5.4CVSS5.7AI score0.00646EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/14 3:18 a.m.63 views

GHSA-3892-QQV6-H2QM Stored XSS vulnerability in Jenkins S3 Publisher Plugin

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in...

5.4CVSS5.1AI score0.00673EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/14 3:16 a.m.63 views

GHSA-P76J-5V6V-6C22 Apache NiFi JMS Deserialization issue

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release...

7.5CVSS6.9AI score0.03176EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/14 2:3 a.m.63 views

GHSA-4CVM-5776-JX9F Ansible Arbitrary Code Execution

User module in ansible before 1.6.6 is vulnerable to command execution. Ansible can get the result of remote command in variable, which may come from untrusted source of input. If the content of variable isn't properly filtered and when attempting to use the variable, it will trigger a function...

8.8CVSS8.8AI score0.02521EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/13 1:48 a.m.63 views

GHSA-46P2-FWQG-3H6M Incorrect Authorization in Jenkins Git Plugin

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users...

5.3CVSS5.3AI score0.03988EPSS
SaveExploits2References4
OSV
OSV
added 2022/05/13 1:35 a.m.63 views

GHSA-6PCV-QQX4-MXM3 Minikube RCE via DNS Rebinding

In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is easy to predict, the attacker can use DNS rebinding to indirectly make requests to the Kubernetes Dashboard, create a new Kubernetes Deployment...

8.8CVSS8.6AI score0.00702EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/13 1:12 a.m.63 views

GHSA-H6C8-X5R3-PM88 Apache Tomcat Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file...

6.8CVSS8.5AI score0.1399EPSS
SaveExploits0References12
OSV
OSV
added 2022/05/13 1:11 a.m.63 views

GHSA-GC96-H5PR-839J Uncontrolled Resource Consumption in Artemis and HornetQ

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

7.5CVSS7.5AI score0.05976EPSS
SaveExploits0References15
OSV
OSV
added 2022/04/26 9:21 p.m.63 views

GHSA-75P6-52G3-RQC8 Keycloak vulnerable to privilege escalation on Token Exchange feature

A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the clientid of the target. This could allow a client to gain unauthorized access to...

9.8CVSS9.5AI score0.01308EPSS
SaveExploits0References4
OSV
OSV
added 2022/04/20 12:0 a.m.63 views

GHSA-Q6H7-4QGW-2J9P Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector

A vulnerability was identified in Consul and Consul Enterprise “Consul” such that HTTP health check endpoints returning an HTTP redirect may be abused as a vector for server-side request forgery SSRF. This vulnerability, CVE-2022-29153, was fixed in Consul 1.9.17, 1.10.10, and 1.11.5...

7.5CVSS7.5AI score0.08676EPSS
SaveExploits0References9
OSV
OSV
added 2022/04/11 9:38 p.m.63 views

GHSA-GX8X-G87M-H5Q6 Denial of Service (DoS) in Nokogiri on JRuby

Summary Nokogiri v1.13.4 updates the vendored org.cyberneko.html library to 1.9.22.noko2 which addresses CVE-2022-24839. That CVE is rated 7.5 High Severity. See GHSA-9849-p7jc-9rmv for more information. Please note that this advisory only applies to the JRuby implementation of Nokogiri = 1.13.4...

7.5CVSS7.5AI score
SaveExploits0References7
OSV
OSV
added 2022/03/18 11:10 p.m.63 views

GHSA-X4JG-MJRX-434G Improper Verification of Cryptographic Signature in node-forge

Impact RSA PKCS1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed and garbage data added to forge a signature when a low public exponent is being used. Patches The issue has been...

7.5CVSS7.5AI score0.01031EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/17 12:0 a.m.63 views

DLA-2953-1 openssl1.0 - security update

Bulletin has no description...

7.5CVSS8.2AI score0.73188EPSS
SaveExploits2
OSV
OSV
added 2022/03/11 12:2 a.m.63 views

GHSA-X28W-HVWC-MP75 Static Code Injection in Microweber

Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...

7.7CVSS9.6AI score0.01748EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/01 12:0 a.m.63 views

ASB-A-193149550

In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00135EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/10 10:42 p.m.63 views

GHSA-9JQ9-C2CV-PCRJ Cross-site Scripting by SVG upload in xwiki-platform

Impact When using default XWiki configuration, it's possible for an attacker to upload an SVG containing a script executed when executing the download action on the file. Patches This problem has been patched so that the default configuration doesn't allow to display the SVG files in the browser...

4.1CVSS5.2AI score0.0087EPSS
SaveExploits1References6
OSV
OSV
added 2022/02/10 8:29 p.m.63 views

GHSA-RPJ6-2Q8R-98F8 Request logging bypass in Jenkins Audit Trail Plugin

Audit Trail Plugin logs requests whose URL path matches an admin-configured regular expression. A discrepancy between the behavior of the plugin and the Stapler web framework in parsing URL paths allows attackers to craft URLs that would bypass request logging in Audit Trail Plugin 3.6 and earlie...

5.3CVSS5.1AI score0.01169EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/09 9:41 p.m.63 views

GHSA-GF7X-2J2X-7F73 Missing authorization in xwiki-platform

Impact Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. Patches It has been patched in XWiki 13.2CR1 and 12.10.6 Workarounds There is no workaround beside patching. References https://jira.xwiki.org/browse/XWIKI-18430 For mo...

6.5CVSS6.4AI score0.00945EPSS
SaveExploits0References6
OSV
OSV
added 2022/02/05 12:0 a.m.63 views

GHSA-H6PR-C536-6RJG Prototype Pollution in object-path-set

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

7.5CVSS9.4AI score0.02125EPSS
SaveExploits1References6
OSV
OSV
added 2022/01/31 12:0 a.m.63 views

GHSA-VGMW-9CWW-QQ99 Incorrect Authorization in calibreweb

calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...

7.1CVSS6.4AI score0.0067EPSS
SaveExploits1References5
OSV
OSV
added 2022/01/12 10:44 p.m.63 views

GHSA-7W54-GP8X-F33M Potential exposure of tokens to an Unauthorized Actor

Impact When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are multiple failed attempts to contact Replit through a WebSocket, the library will attempt to communicate using a fallback poll-based proxy. The URL of the proxy has changed, so...

6.5CVSS7AI score0.00972EPSS
SaveExploits0References4
OSV
OSV
added 2022/01/06 6:34 p.m.63 views

GHSA-9328-7PCW-VW69 Cross-Site Request Forgery in Moodle

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

6.5CVSS6.9AI score0.00572EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/30 12:0 a.m.63 views

DLA-2871-1 lxml - security update

Bulletin has no description...

8.2CVSS7.7AI score0.02477EPSS
SaveExploits0
OSV
OSV
added 2021/12/17 7:15 p.m.63 views

PYSEC-2021-855

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects...

5.3CVSS5.3AI score0.01561EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/16 2:29 p.m.63 views

GHSA-7RPJ-HG47-CX62 Improper Restriction of XML External Entity Reference in com.h2database:h2.

H2 is an embeddable RDBMS written in Java. The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity XXE Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML method. If it...

8.1CVSS9.2AI score0.03284EPSS
SaveExploits1References10
OSV
OSV
added 2021/11/25 12:0 a.m.63 views

GHSA-JC55-CRG7-PR35 EC-CUBE Improper access control in Management screen

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors...

6.5CVSS6.1AI score0.01276EPSS
SaveExploits1References4
OSV
OSV
added 2021/11/15 11:28 p.m.63 views

GHSA-WMPV-C2JP-J2XG ERC1155Supply vulnerability in OpenZeppelin Contracts

When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the ERC1155Supply extension, total supply is not updated until after the callback, thus during the callback the reported total supply is lower than the real number of...

6.9AI score
SaveExploits0References2
OSV
OSV
added 2021/11/01 12:0 a.m.63 views

ASB-A-195630721

In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACTACROSSPROFILES permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

7.8CVSS7.8AI score0.00105EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/06 5:48 p.m.63 views

GHSA-VMFH-C547-V45H Remote code execution in ruby-jss

The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of using Marshal.load during XML document processing...

9.8CVSS9.8AI score0.02603EPSS
SaveExploits0References6
OSV
OSV
added 2021/09/26 7:15 p.m.63 views

CVE-2021-41617

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with...

7CVSS4.8AI score
SaveExploits0References16
OSV
OSV
added 2021/08/25 8:59 p.m.63 views

GHSA-JF43-3V8J-QWWR Data races in multiqueue

Affected versions of multiqueue unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS5.9AI score0.01098EPSS
SaveExploits1References3
OSV
OSV
added 2021/08/25 8:58 p.m.63 views

GHSA-77M6-X95J-75R5 Data races in ticketed_lock

Affected versions of this crate unconditionally implemented Send for ReadTicket & WriteTicket. This allows to send non-Send T to other threads. This can allows creating data races by cloning types with internal mutability and sending them to other threads as T of ReadTicket/WriteTicket. Such data...

8.1CVSS8.1AI score0.00766EPSS
SaveExploits0References6
OSV
OSV
added 2021/08/25 8:56 p.m.63 views

GHSA-WXJF-9F4G-3V44 Data races in noise_search

Affected versions of the noisesearch crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory...

8.1CVSS8.2AI score0.0124EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/25 8:55 p.m.63 views

GHSA-X67X-VG9M-65C3 Integer overflow in base64

Affected versions of this crate suffered from an integer overflow bug when calculating the size of a buffer to use when encoding base64 using the encodeconfigbuf and encodeconfig functions. If the input string was large, this would cause a buffer to be allocated that was too small. Since this...

9.8CVSS9.8AI score0.01534EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/25 8:50 p.m.63 views

GHSA-64J8-7GP2-XJX5 Data races in try-mutex

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS5.2AI score0.00377EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/25 8:49 p.m.63 views

GHSA-H45V-VGVP-3H5V Out-of-bounds write in stack

ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds...

9.8CVSS9.4AI score0.01844EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/25 8:43 p.m.63 views

GHSA-GWFJ-PW2X-H6C2 Out of bounds read in simd-json

The affected version of this crate did not guard against accessing memory beyond the range of its input data. A pointer cast to read the data into a 256-bit register could lead to a segmentation fault when the end plus the 32 bytes 256 bit read would overlap into the next page during string...

7.5CVSS7.4AI score0.01398EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/23 7:41 p.m.63 views

GHSA-23R4-5MXP-C7G5 parse-server new anonymous user session acts as if it's created with password

Impact Developers that use the REST API to signup users and also allow users to login anonymously. When an anonymous user is first signed up using REST, the server creates session incorrectly, particularly the authProvider field in Session class under createdWith shows the user logged in creating...

4.8CVSS6.4AI score0.00993EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/05 12:0 a.m.63 views

DSA-4949-1 jetty9 - security update

Bulletin has no description...

7.8CVSS6.5AI score0.7848EPSS
SaveExploits5
Total number of security vulnerabilities5000