1478 matches found
HC Mingham-Smith 安全漏洞
HC Mingham-Smith is an application from HC Mingham-Smith, Inc. dedicated to helping PCs integrate into TCP/IP-based networks. A security vulnerability exists in HC Mingham-Smith Tardis 2000 version 1.6 that stems from the presence of a privilege escalation issue, which could allow a malicious act...
Cross site scripting
Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inject an arbitrary script...
PT-2022-27220 · Zenphoto · Zenphoto
Name of the Vulnerable Software and Affected Versions: Zenphoto versions prior to 1.6 Description: The issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script, exploiting a stored cross-site scripting vulnerability. Recommendations: For versions...
JVN#06093462: Zenphoto vulnerable to cross-site scripting
Zenphoto contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is using the product. Solution Update the software Update the software to the latest version according to the information provided by the developer...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2022-4495 collective.dms.basecontent column.py renderCell cross site scripting
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated...
PT-2022-27349 · Unknown · Collective.Dms.Basecontent
Name of the Vulnerable Software and Affected Versions: collective.dms.basecontent versions up to 1.6 Description: The issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py, leading to cross site scripting. The attack may be initiated remotely...
GHSA-V93C-CXJ5-C398 Jenkins Google Login Plugin Open Redirect vulnerability
Jenkins Google Login Plugin 1.4 through 1.6 both inclusive improperly determines that a redirect URL after login is legitimately pointing to Jenkins. Google Login Plugin 1.7 only redirects to relative Jenkins URLs...
CVE-2022-46683
Jenkins Google Login Plugin 1.4 through 1.6 both inclusive improperly determines that a redirect URL after login is legitimately pointing to Jenkins...
CVE-2019-17455 affecting package libntlm for versions less than 1.6-1
CVE-2019-17455 affecting package libntlm for versions less than 1.6-1. An upgraded version of the package is available that resolves this issue...
Jenkins Google Login Plugin 输入验证错误漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. An input validation error...
WordPress plugin reCAPTCHA 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Information disclosure
pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...
SICK SIM Series 访问控制错误漏洞
SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series FX Partnumber versions 1097816 and 1097817 firmware versions prior to 1.6.0, which stems from a vulnerability that allows an unprivileged, remote attacker to acces...
CVE-2022-42234
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
Arbitrary file deletion
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
CVE-2022-42234
Summary: CVE-2022-42234 is a file inclusion vulnerability in the template management module of UCMS 1.6. The Red Hat, NVD, and other feeds confirm a vulnerability in UCMS 1.6, with CVSSv3.1 impacts: CVSS 3.1 base score 8.8 (HIGH) across confidentiality, integrity, and availability, confirmed with...
CVE-2022-42234
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
