Skip to content
OpenAdvisories

Archive

11 September 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.8

    JFinalCMS com.cms.controller.admin.TemplateController update path traversal

    A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.admin.TemplateController. The manipulation of the argument fil…

  • Low 2.4

    Kaon CG3000 dhcpcd Command cross site scripting

    A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input <script>alert('XSS')<…

  • Low 2.6

    Affected versions of Octopus Server had a weak content security policy.

  • Low 3.7

    RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cau…