CVE-2019-15740

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

CVE-2019-15740

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

CVE-2019-15740

GitLab CE/EE versions 7.9–12.2.1 are affected by CVE-2019-15740 due to EXIF geolocation data not being removed from certain image uploads, enabling disclosure of location metadata. Root cause: failure to strip EXIF data during uploads. Impact: potential exposure of geolocation information. Mitiga...

CVE-2019-15740

Removed by vendor...

CVE-2019-15740

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

Arbitrary Code Execution

pimcore/pimcore is vulnerable to arbitrary code execution. The vulnerability exists as PHAR uploads were possible, allowing code to be run through the phar://../../../../../../../../var/www/html/web/var/assets/ directory...

CVE-2019-15740: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

PT-2019-14361

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 7.9 through 12.2.1 Description An issue was discovered where EXIF Geolocation data was not being removed from certain image uploads. Recommendations For versions 7.9 through 12.2.1, consider...

DEBIAN-CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

Cross site scripting

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

CVE-2019-16217

WordPress, versions before 5.2.3, is affected by an XSS flaw in media uploads due to mishandling of wp_ajax_upload_attachment. The underlying issue is improper handling of upload attachments that allows cross-site scripting. The impact is XSS in the context of media uploads, with no other vectors...

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

File Upload Vulnerability in Harbin Xinzhongxin Electronic Co.

Harbin Xinzhongxin Electronics Co., Ltd. is a domestic campus card system solution provider, business covers intelligent campus, intelligent transportation, intelligent public security, intelligent park and other related fields. A file upload vulnerability exists in the one-card system of Harbin...

CVE-2019-16217: Improper Neutralization of Input During Web Page Generation

WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...

FreeBSD : wordpress -- multiple issues (8a9f86de-d080-11e9-9051-4c72b94353b5)

wordpress developersreports : Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments. Props to Tim Coen f...

wordpress -- multiple issues

wordpress developers reports: Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments. Props to Tim Coen f...