PT-2019-12952

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.5.1 Description The issue is related to the mishandling of context changes by the rcc context function in libr/egg/egg lang.c. This can be exploited by remote attackers to cause a denial of service, resulting in an...

PT-2019-12944

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.5.1 Description The issue is related to a heap-based buffer over-read in the r egg lang parsechar function, which can be exploited by remote attackers to cause a denial of service, potentially leading to an...

[SECURITY] Fedora 30 Update: deepin-api-3.17.0-2.fc30

Go-lang bingding for dde-daemon...

Fedora Update for deepin-api FEDORA-2019-c25a0e7032

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NASM: Multiple vulnerabilities

Background NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats ELF, a.out, COFF, etc, and has its own disassembler. Description Multiple vulnerabilities have been...

CVE-2018-20137: Improper Neutralization of Input During Web Page Generation

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

PT-2018-15264

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description A security issue exists in the software, where an XSS attack can be performed via the Header or Body in the Layout Variables during the creation of a new page. This is demonstrated by the...

CVE-2018-16635

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php...

CVE-2018-16635

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php...

ryukyu-lang.lib.u-ryukyu.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-708278 Description| Value ---|--- Affected Website:| ryukyu-lang.lib.u-ryukyu.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Metinfo Cross-Site Scripting Vulnerability (CNVD-2019-05925)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the admin/column/move.php interface in Metinfo version 6.1.3. A remote attacker can exploit this vulnerability to inject arbitrary web...

PT-2018-15119

Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue is related to reflected XSS. It can be exploited via the lang columnerr4 parameter in the "admin/column/move.php" endpoint. Recommendations For Metinfo version 6.1.3, consider restricting access to t...

CVE-2018-19433

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $curlang value...

CVE-2018-19433

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $curlang value...

Design/Logic Flaw

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $curlang value...

CVE-2018-19433

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $curlang value...

CVE-2018-19433

CVE-2018-19433 affects ShowDoc 2.4.1, with an XSS vulnerability stemming from incorrect handling of the $cur_lang value in install/database.php (lang parameter). Public sources (NVD, OSV, CVE lists) describe the issue and classify it as a Cross-Site Scripting risk, but none of the connected docum...

ShowDoc cross-site scripting vulnerability (CNVD-2018-24180)

ShowDoc is an online document sharing tool. A cross-site scripting vulnerability exists in ShowDoc version 2.4.1, which stems from the failure of the install/database.php file to correctly handle the value of $curlang, which can be exploited by remote attackers to inject arbitrary Web script or...

PT-2018-14959

Name of the Vulnerable Software and Affected Versions ShowDoc version 2.4.1 Description The issue arises from the mishandling of the $cur lang value in the install/database.php file, leading to a potential XSS attack via the lang parameter. Recommendations For ShowDoc version 2.4.1, avoid using t...

CVE-2018-19433: Improper Neutralization of Input During Web Page Generation

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $curlang value...