Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2020-5256 | BookStack up to 0.25.4 Image Upload neutralization of directives (GHSA-g9rq-x4fj-f5hx)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in BookStack up to 0.25.4. It has been classified as critical. This affects an unknown part of the component Image Upload. The manipulation leads to improper neutralization of directives in dynamically evaluated code ('eval injection'). This vulnerability is uniquely identified as CVE-2020-5256. It is possible to initiate the attack remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2022-36010 | oxyno-zeta react-editable-json-tree prior 2.2.2 neutralization of directives (GHSA-j3rv-w43q-f9x2)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-26477 | XWiki prior 13.10.10/14.4.6/14.9-rc-1 Request Parameter newThemeName neutralization of directives (GHSA-x2qm-r4wx-8gpg)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-46731 | XWiki Platform section neutralization of directives (GHSA-62pr-qqf7-hh89)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50723 | XWiki Platform Administration Interface neutralization of directives (GHSA-qj86-p74r-7wp5)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36401 | GeoServer up to 2.23.5/2.24.3/2.25.1 OGC Request neutralization of directives (GHSA-6jj6-gm7p-fcvv)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37900 | xwiki-platform up to 14.10.20/15.5.4/15.10.5/16.0.0 neutralization of directives (GHSA-wf3x-jccf-5g5g)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-43400 | xwiki-platform up to 14.10.20/15.5.4/15.10.5 URL neutralization of directives (GHSA-wcg9-pgqv-xm5v)


📈 49.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38193 | ESRI Portal for ArcGIS up to 10.8.1 neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-0888 | B. Braun Battery Pack SP L90/L92 Web Server neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-7101 | Douglas Wilson Spreadsheet::ParseExcel 0.65 eval neutralization of directives (FEDORA-2023-84d3cc47b1)


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-21650 | XWiki xwiki-platform up to 14.10.16/15.5.2/15.7 User Registration first name/last name neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-7224 | OpenVPN Connect up to 3.4.6 on macOS Environment Variable DYLD_INSERT_LIBRARIES neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-9507 | Vertiv Avocent UMG-4000 4.2.1.19 Code Syntax neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31984 | XWiki xwiki-platform-search-solr-ui Space Title neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31982 | XWiki xwiki-platform-search-ui DatabaseSearch neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31465 | XWiki xwiki-platform-search-ui SearchSuggestSourceSheet neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31996 | XWiki xwiki-commons-velocity Escapetool neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-7245 | OpenVPN Connect Node.js Framework ELECTRON_RUN_AS_NODE neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-43404 | NicPWNs MEGABOT up to 1.4.x /math eval expression neutralization of directives (ID 137)


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-27321 | Refuel Autolabel 0.0.8 CSV File neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45848 | MindsDB up to 24.7.4.0 ChromaDB Integration neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45849 | MindSB up to 24.7.4.0 Microsoft Sharepoint Integration neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45847 | MindsDV up to 24.7.4.0 Integration Engine neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-27320 | Refuel Autolabel up to 0.0.8 CSV File neutralization of directives


📈 40.04 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack up to 0.30.4 Image URL and/or injection


📈 35.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6199 | BookStack 23.10.2 server-side request forgery


📈 29.51 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45808 | Envoy up to 1.28.6/1.29.4/1.30.0 REQUESTED_SERVER_NAME neutralization for logs (GHSA-p222-xhp9-39rc)


📈 28.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-47083 | Microsoft Power Platform Terraform Provider up to 2.7.0 client_secret neutralization for logs (GHSA-7w3w-pjm5-m36c)


📈 28.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6887 | saysky ForestBlog up to 20220630 Image Upload /admin/upload/img filename unrestricted upload


📈 28.49 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack 0.18.4 Page Creation Cross Site Scripting


📈 28.39 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack 0.18.4 Page Creation cross site scripting


📈 28.39 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack up to 0.29.1 Comment cross site scripting


📈 28.39 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack up to 0.30.3 Link cross site scripting


📈 28.39 Punkte
🕵️ Sicherheitslücken

🕵️ BookStack up to 0.30.3 Link cross site scripting


📈 28.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-46736 | EspoCRM up to 8.0.4 Upload Image From URL API /Attachment/fromImageUrl server-side request forgery (GHSA-g955-rwxx-jvf6)


📈 23.99 Punkte
🕵️ Sicherheitslücken

matomo
•