A vulnerability has been found in XWiki up to 12.6.87/12.10.3 (Content Management System) and classified as problematic. This vulnerability affects an unknown function of the component Script Service. Upgrading to version 12.6.88, 12.10.4 or 13.0 eliminates this vulnerability.
XWiki up to 12.6.87/12.10.3 Script Service protection mechanism
- Virtual Patching
- July 2, 2021
- 7:04 am
CVE-2023-3065 : MOBATIME AMXGT100 UP TO 1.3.20 IMPROPER AUTHENTICATION
Description Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20.
CVE-2023-2781 : USER EMAIL VERIFICATION FOR WOOCOMMERCE PLUGIN UP TO 3.5.0 ON WORDPRESS IMPROPER AUTHENTICATION
Description The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up
CVE-2023-33965 : BROOK PRIOR 20230606 TPROXY SERVER OS COMMAND INJECTION
Description Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker