10 May 2023

132 results · Clear filters · Feed

• Medium 5.0
  CVE-2023-2629

  Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

  Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 10, 2023
• Medium 6.8
  CVE-2023-2615

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 6.8
  CVE-2023-2614

  Cross-site Scripting (XSS) - DOM in pimcore/pimcore

  Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 5.7
  CVE-2023-2630

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 6.8
  CVE-2023-2616

  Cross-site Scripting (XSS) - Generic in pimcore/pimcore

  Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 4.8
  CVE-2023-23901

  Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, an…

  Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A130
  May 10, 2023
• Medium 4.8
  CVE-2023-25070

  Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the…

  Seiko Solutions SkyBridge MB-A100/110
  May 10, 2023
• Medium 5.4
  CVE-2023-25833

  BUG-000155004 HTML injection issue in Portal for ArcGIS.

  There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made…

  Esri Portal for ArcGIS
  May 10, 2023
• Medium 6.5
  CVE-2023-25072

  Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unaut…

  Seiko Solutions SkyBridge MB-A100/110
  May 10, 2023
• Medium 5.3
  CVE-2023-25184

  Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthentica…

  Seiko Solutions SkyBridge MB-A200, SkyBridge BASIC MB-A130, and SkySpider MB-R210
  May 10, 2023
• Medium 4.3
  CVE-2023-22361 EPSS 36%

  Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote au…

  Seiko Solutions SkyBridge MB-A100/110
  May 10, 2023
• Medium 5.5
  CVE-2022-4008

  In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Ser…

  Octopus Deploy Octopus Tentacle
  May 10, 2023