3941 matches found
CVE-2022-39019: Improper Authentication
Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server...
CVE-2022-39016: Improper Input Validation
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload...
CVE-2022-39018: Exposure of Sensitive Information to an Unauthorized Actor
Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL...
CVE-2022-39017: Improper Input Validation
Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments...
CVE-2021-38728
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...
SEMCMS 跨站脚本漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A cross-site scripting vulnerability exists in SEMCMS SHOP version 1.1, which stems from a cross-site scripting issue in AntMCoup.php...
PT-2022-10758
Name of the Vulnerable Software and Affected Versions SEMCMS SHOP version 1.1 Description The issue is related to Cross Site Scripting XSS via the Ant M Coup.php file. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions. Recommendations For...
Upgraded Q -> M from 497 [1666363365064]
Judge has assessed an item in Issue 497 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
m-fire.co.uk Cross Site Scripting vulnerability OBB-2981012
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Upgraded Q -> M from 193 [1665109261242]
Judge has assessed an item in Issue 193 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> M from 657 [1664812805667]
Judge has assessed an item in Issue 657 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> M from 357 [1664289665374]
Judge has assessed an item in Issue 357 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> M from 496 [1663882181323]
Judge has assessed an item in Issue 496 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
m-nachshon.org Cross Site Scripting vulnerability OBB-2935865
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the `calculate_gain` function in the `libfaad/sbr_hfadj.c` component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the calculategain function in the libfaad/sbrhfadj.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the lack of comparison with MAXM. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its...
Denial Of Service (DoS)
asterisk is vulnerable to denial of service. The vulnerability exists due to allows an append operation relative to the active topology which allows an attacker to trigger a crash by sending an m=image line and zero port in a response...
CVE-2022-39828
signpFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of ECKEYsetprivatekey, leading to a denial of service...
CVE-2022-36621
Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEEAllocateTransientObject...
fcor.tamu.edu Cross Site Scripting vulnerability OBB-2880863
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...