CVE-2019-7330: Improper Neutralization of Input During Web Page Generation

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

PT-2019-5684

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.6 Description The issue is related to a use-after-free in the show numa stats function of the Linux kernel's NUMA system, caused by the inappropriate freeing of NUMA fault statistics. This can potentially all...

Tiki User Tasks Module SQL Injection Vulnerability

Tiki is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A SQL injection vulnerability exists in the User Tasks module in versions prior to Tiki 17.2,...

Design/Logic Flaw

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...

CVE-2018-20719

In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-usertasks.php showhistory parameter...

PT-2019-10178

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 17.2 Description: The issue concerns a SQL Injection vulnerability via the show history parameter in the tiki-user tasks.php component. Recommendations: For versions prior to 17.2, update to version 17.2 or later to...

YUNUCMS cross-site scripting vulnerability (CNVD-2019-00564)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/index/controller/Show.php file there is a cross-site scripting vulnerability, a remote attacker can send the 'cw' parameter to...

CVE-2019-5311

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

CVE-2019-5311

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

CVE-2019-5311: Improper Neutralization of Input During Web Page Generation

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

PT-2019-17574

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.8 Description An issue was discovered in YUNUCMS, where the app/index/controller/Show.php file has a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the cw parameter in the...

show-time.kr XSS vulnerability

Open Bug Bounty ID: OBB-715738 Description| Value ---|--- Affected Website:| show-time.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

DouCo DouPHP Cross-Site Scripting Vulnerability (CNVD-2019-00998)

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/show.php?rec=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wi...

CVE-2018-20560

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the showname parameter...

PT-2018-15430

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in the software, where the "admin/show.php?rec=update" API endpoint has a cross-site scripting XSS issue via the show name parameter. Recommendations For DouPHP version 1.5...

trade-show-vendors.com XSS vulnerability

Open Bug Bounty ID: OBB-700825 Description| Value ---|--- Affected Website:| trade-show-vendors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c

The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the sigevent-sigevnotify field, which leads to out-of-bounds access in the showtimer function...

kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c

The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the sigevent-sigevnotify field, which leads to out-of-bounds access in the showtimer function...

CVE-2018-19195

An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\showproduct.html file...

PT-2018-14855

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered related to XSS in the template/default/show product.html file. Recommendations For XiaoCms version 20141229, consider restricting access to the template/default/show product.html fil...