7423 matches found
CVE-2016-10993
The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...
Design/Logic Flaw
The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...
CVE-2016-10993
The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...
PT-2019-7786
Name of the Vulnerable Software and Affected Versions ScoreMe theme versions prior to 2016-04-01 Description The issue allows for XSS via the s parameter. Recommendations For ScoreMe theme versions prior to 2016-04-01, update to a version released after 2016-04-01 to resolve the issue...
PT-2019-19306 · 3S Smart · 3S-Smart Codesys
Name of the Vulnerable Software and Affected Versions: 3S-Smart CODESYS V3 through 3.5.12.30 Description: An issue was discovered that allows a user with low privileges to take full control over the runtime. Recommendations: For versions 3S-Smart CODESYS V3 through 3.5.12.30, at the moment, there...
CVE-2016-10993: Improper Neutralization of Input During Web Page Generation
The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...
CVE-2019-11739
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 68.1 and Thunderbird 60.9...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Debian DSA-4523-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message. C Tenable Network Security, Inc...
[SECURITY] [DSA 4523-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4523-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 15, 2019 https://www.debian.org/security/faq -...
MGASA-2019-0275 Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message CVE-2019-11739. Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 CVE-2019-11740...
Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message CVE-2019-11739. Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 CVE-2019-11740...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Design/Logic Flaw
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
CVE-2019-16312 affects s-cms v3.0 with a stored/reflected XSS in index.php?type=text via the S_id parameter. The Red Hat and NVD entries confirm the same description; public details are limited to the XSS path and parameter, with no explicit exploitation vectors or patched versions provided in th...
CVE-2019-16310: Improper Neutralization of Input During Web Page Generation
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...
PT-2019-14621
Name of the Vulnerable Software and Affected Versions s-cms version V3.0 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs in the index.php file when the type parameter is set to 'text' and the S id parameter is manipulated...