All Posts by: Virtual Patching

Umbraco CMS up to 7.15.6 URL booting.aspx redirect

A vulnerability has been found in Umbraco CMS up to 7.15.6 (Content Management System) and classified as problematic. This vulnerability

Common Vulnerabilities and Exposures

Securepoint SSL VPN Client up to 2.0.31 on Windows Configuration Handling access control

A vulnerability was found in Securepoint SSL VPN Client up to 2.0.31 on Windows (Network Encryption Software) and classified as

Common Vulnerabilities and Exposures

Adobe Experience Manager up to 6.3.3.8/6.4.8.3/6.5.7.0 Form Field cross site scripting

A vulnerability was found in Adobe Experience Manager up to 6.3.3.8/6.4.8.3/6.5.7.0 (Content Management System). It has been classified as problematic.

Common Vulnerabilities and Exposures

LimeSurvey 4.2.5 Textbox cross site scripting

A vulnerability was found in LimeSurvey 4.2.5 (Survey Software). It has been declared as problematic. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Webport CMS 1.19.10.17121 /file/download pathname traversal

A vulnerability was found in Webport CMS 1.19.10.17121 (Content Management System). It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures

IPFire 2.23 Web UI mail.cgi cross site scripting

A vulnerability classified as problematic has been found in IPFire 2.23. This affects an unknown function of the file mail.cgi

Common Vulnerabilities and Exposures

LimeSurvey 4.1.11+200316 PermissiontemplatesController.php name/description cross site scripting

A vulnerability was found in LimeSurvey 4.1.11+200316 (Survey Software) and classified as problematic. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Enhancesoft osTicket up to 1.12.5 Parameter include/ajax.search.php queue-name cross site scripting

A vulnerability was found in Enhancesoft osTicket up to 1.12.5 (Ticket Tracking Software). It has been classified as problematic. This

Common Vulnerabilities and Exposures

ECShop 4.0 Security Policy user.php cross site scripting

A vulnerability was found in ECShop 4.0. It has been declared as problematic. This vulnerability affects some unknown processing of

Common Vulnerabilities and Exposures

Enhancesoft osTicket up to 1.12.5 Parameter include/class.queue.php queue-name cross site scripting

A vulnerability was found in Enhancesoft osTicket up to 1.12.5 (Ticket Tracking Software). It has been rated as problematic. This

Common Vulnerabilities and Exposures

Sylius up to 1.9.4 information disclosure [CVE-2021-32720]

A vulnerability classified as problematic has been found in Sylius up to 1.9.4. Affected is an unknown functionality. Upgrading to

Common Vulnerabilities and Exposures

GlobalNewFiles on MediaWiki Large Page resource consumption

A vulnerability classified as problematic was found in GlobalNewFiles on MediaWiki (affected version unknown). Affected by this vulnerability is some

Common Vulnerabilities and Exposures

RabbitMQ up to 3.8.16 Management UI cross site scriting

A vulnerability, which was classified as problematic, has been found in RabbitMQ up to 3.8.16. Affected by this issue is

Common Vulnerabilities and Exposures

Adobe Acrobat Reader Javascript use after free [CVE-2021-28562]

A vulnerability, which was classified as critical, was found in Adobe Acrobat Reader up to 2017.011.30194/2020.001.30020/2021.001.20150 (Document Reader Software). This

Common Vulnerabilities and Exposures

Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2 RMA PDF Filename information disclosure

A vulnerability has been found in Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2 and classified as problematic. This vulnerability affects an unknown

Common Vulnerabilities and Exposures

Adobe After Effects up to 18.0 out-of-bounds write [CVE-2021-28586]

A vulnerability was found in Adobe After Effects up to 18.0 and classified as critical. This issue affects some unknown

Common Vulnerabilities and Exposures

Zammad up to 4.0.0 404 Page injection

A vulnerability was found in Zammad up to 4.0.0. It has been classified as problematic. Affected is an unknown function

Common Vulnerabilities and Exposures

Zammad up to 4.0.0 Ticket Article Detail View access control

A vulnerability was found in Zammad up to 4.0.0. It has been declared as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Zammad up to 4.0.0 Linked Ticket access control

A vulnerability was found in Zammad up to 4.0.0. It has been rated as critical. Affected by this issue is

Common Vulnerabilities and Exposures

Online Pet Shop We App 1.0 sql injection [CVE-2021-35456]

A vulnerability classified as critical has been found in Online Pet Shop We App 1.0. This affects an unknown part.

Common Vulnerabilities and Exposures

RabbitMQ up to 3.8.17 rabbitmq_federation_management Plugin cross site scriting

A vulnerability classified as problematic was found in RabbitMQ up to 3.8.17. This vulnerability affects an unknown code of the

Common Vulnerabilities and Exposures

Adobe Experience Manager up to 6.3.3.8/6.4.8.3/6.5.7.0 denial of service

A vulnerability, which was classified as problematic, has been found in Adobe Experience Manager up to 6.3.3.8/6.4.8.3/6.5.7.0 (Content Management System).

Common Vulnerabilities and Exposures

Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2 Create Customer Endpoint improper authorization

A vulnerability, which was classified as critical, was found in Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2. Affected is some unknown processing

Common Vulnerabilities and Exposures

Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2 Child Theme path traversal

A vulnerability has been found in Adobe Magento up to 2.3.6-p1/2.4.1-p1/2.4.2 and classified as critical. Affected by this vulnerability is