Microsoft Office Excel Chart Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to read freed memory on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

Microsoft Excel Malformed Chart Sheet Substream Memory Corruption (MS10-038) - Ver2 (CVE-2010-0823)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

New Atlanta BlueDragon Directory Traversal Vulnerability

New Atlanta BlueDragon is a ColdFusion Markup Language engine. A directory traversal vulnerability in New Atlanta BlueDragon's CFChart servlet allows an attacker to read or delete arbitrary files due to a failure to adequately filter the 'QUERYSTRING' value in the cfchart.cfchart file...

CVE-2014-9501

Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...

Cross site scripting

Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...

CVE-2014-9501

The CVE concerns the Drupal Poll Chart Block module (Drupal 7.x, versions prior to 7.x-1.2). The issue is an XSS vulnerability caused by insufficient sanitization of poll node titles displayed in the poll chart block, allowing remote authenticated users to inject arbitrary script/HTML. Affected p...

CVE-2014-9501

Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...

PT-2015-4249

Name of the Vulnerable Software and Affected Versions Poll Chart Block module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a poll node title, which can lead to cross-site scripting XSS attacks. Recommendations F...

CVE-2014-9501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...

DEBIAN-CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

PT-2014-2223

Name of the Vulnerable Software and Affected Versions amCharts Flash 1 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters, including data file or settings fi...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09219)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote, authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09218)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7267

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

Cross site scripting

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

Cross site scripting

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

CVE-2014-7268

CVE-2014-7268 is a cross-site scripting (XSS) vulnerability in the data-export feature of the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting version 7.8.1 and earlier. The reported issue injects arbitrary web script/HTML via unspecified vectors. The provided sources do not specify the underl...