Baza CVE

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive…

Niepewna ścieżka wyszukiwania w Acrobat Reader umożliwia eskalację uprawnień po otwarciu złośliwego pliku.

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation…

The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a…

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user…

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive…

The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link…

Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.

Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.

When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that…

Brak uwierzytelnienia w moltis umożliwia zdalne przejęcie kontroli.

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component…

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary…

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and…

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error…

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method. Any application with fields or field labels where…

Podatność XSS w Adobe Experience Manager pozwala atakującemu na wstrzyknięcie złośliwego skryptu.

Błąd w Okta Access Gateway umożliwia obejście autoryzacji w skonfigurowanych zasobach.

Ujawnienie sekretu klienta OAuth w instalatorze Okta Hyperdrive umożliwia dostęp do poufnych danych.

Brak walidacji nazwy pliku w Okta Access Gateway umożliwia zapis danych w niezamierzonych lokalizacjach.

Brak sanitizacji etykiet w Okta Access Gateway umożliwia zdalne wykonanie kodu.

Wykonanie wstrzykniętych dyrektyw w Okta Access Gateway prowadzi do zdalnego wykonania kodu.

Brak walidacji nagłówków w Okta Access Gateway pozwala na inicjację sesji przez nieautoryzowanych użytkowników.

Brak weryfikacji integralności w wtyczce Okta Hyperdrive umożliwia wykonanie niezaufanego kodu.