validation vulnerabilities and exploits

(subscribe to this query)

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path....

Valicert Enterprise Validation Authority 3.3 Valicert Enterprise Validation Authority 4.0 Valicert Enterprise Validation Authority 4.1 Valicert Enterprise Validation Authority 3.4 Valicert Enterprise Validation Authority 3.5 Valicert Enterprise Validation Authority 4.2 Valicert Enterprise Validation Authority 4.2.1 Valicert Enterprise Validation Authority 3.8 Valicert Enterprise Validation Authority 3.9 Valicert Enterprise Validation Authority 3.6 Valicert Enterprise Validation Authority 3.7

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4)...

Valicert Enterprise Validation Authority 3.3 Valicert Enterprise Validation Authority 3.4 Valicert Enterprise Validation Authority 4.1 Valicert Enterprise Validation Authority 4.2 Valicert Enterprise Validation Authority 3.5 Valicert Enterprise Validation Authority 3.6 Valicert Enterprise Validation Authority 4.2.1 Valicert Enterprise Validation Authority 3.9 Valicert Enterprise Validation Authority 4.0 Valicert Enterprise Validation Authority 3.7 Valicert Enterprise Validation Authority 3.8

Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name text....

Webform Validation Project Webform Validation 6.x-1.1 Webform Validation Project Webform Validation 6.x-1.2 Webform Validation Project Webform Validation 7.x-1.3 Webform Validation Project Webform Validation 6.x-1.0 Webform Validation Project Webform Validation 7.x-1.1 Webform Validation Project Webform Validation 7.x-1.2 Webform Validation Project Webform Validation 6.x-1.5 Webform Validation Project Webform Validation 7.x-1.0 Webform Validation Project Webform Validation 6.x-1.3 Webform Validation Project Webform Validation 6.x-1.4

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which...

Valicert Enterprise Validation Authority 3.8 Valicert Enterprise Validation Authority 3.9 Valicert Enterprise Validation Authority 3.3 Valicert Enterprise Validation Authority 4.0 Valicert Enterprise Validation Authority 4.1 Valicert Enterprise Validation Authority 3.6 Valicert Enterprise Validation Authority 3.7 Valicert Enterprise Validation Authority 3.4 Valicert Enterprise Validation Authority 3.5 Valicert Enterprise Validation Authority 4.2 Valicert Enterprise Validation Authority 4.2.1

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when...

Valicert Enterprise Validation Authority 3.7 Valicert Enterprise Validation Authority 3.8 Valicert Enterprise Validation Authority 3.9 Valicert Enterprise Validation Authority 4.0 Valicert Enterprise Validation Authority 3.5 Valicert Enterprise Validation Authority 3.6 Valicert Enterprise Validation Authority 4.2.1 Valicert Enterprise Validation Authority 3.3 Valicert Enterprise Validation Authority 3.4 Valicert Enterprise Validation Authority 4.1 Valicert Enterprise Validation Authority 4.2

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack...

Jquery Validation For Contact Form 7 Project Jquery Validation For Contact Form 7

dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the self-validating feature enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution (RCE)...

Dropwizard Dropwizard Validation

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

Jqueryvalidation Jquery Validation

The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2 method. This is due...

Jqueryvalidation Jquery Validation

Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature. The issue has been...

Dropwizard Dropwizard Validation Oracle Blockchain Platform1 Github repository available

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook