SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.Read More ...
Continue Reading
September 11, 2022
SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.Read More ...
Continue Reading
September 11, 2022
SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.Read More ...
Continue Reading
September 11, 2022
SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.Read More ...
Continue Reading
September 11, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
September 11, 2022
In Apache Calcite prior to version 1.32.0 the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity references in their configuration, which makes ...
Continue Reading
September 11, 2022
This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parse(r.FormValue("next")) to extract pa ...
Continue Reading
September 11, 2022
This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locati ...
Continue Reading
September 11, 2022
Back to Main
