1496 matches found
JVN#06093462: Zenphoto vulnerable to cross-site scripting
Zenphoto contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is using the product. Solution Update the software Update the software to the latest version according to the information provided by the developer...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated...
PT-2022-27349 · Unknown · Collective.Dms.Basecontent
Name of the Vulnerable Software and Affected Versions: collective.dms.basecontent versions up to 1.6 Description: The issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py, leading to cross site scripting. The attack may be initiated remotely...
CVE-2022-4495 collective.dms.basecontent column.py renderCell cross site scripting
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated...
GHSA-V93C-CXJ5-C398 Jenkins Google Login Plugin Open Redirect vulnerability
Jenkins Google Login Plugin 1.4 through 1.6 both inclusive improperly determines that a redirect URL after login is legitimately pointing to Jenkins. Google Login Plugin 1.7 only redirects to relative Jenkins URLs...
CVE-2022-46683
Jenkins Google Login Plugin 1.4 through 1.6 both inclusive improperly determines that a redirect URL after login is legitimately pointing to Jenkins...
CVE-2019-17455 affecting package libntlm for versions less than 1.6-1
CVE-2019-17455 affecting package libntlm for versions less than 1.6-1. An upgraded version of the package is available that resolves this issue...
Jenkins Google Login Plugin 输入验证错误漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. An input validation error...
WordPress plugin reCAPTCHA 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Information disclosure
pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...
SICK SIM Series 访问控制错误漏洞
SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series FX Partnumber versions 1097816 and 1097817 firmware versions prior to 1.6.0, which stems from a vulnerability that allows an unprivileged, remote attacker to acces...
CVE-2022-42234
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
Arbitrary file deletion
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
CVE-2022-42234
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
CVE-2022-42234
There is a file inclusion vulnerability in the template management module in UCMS 1.6...
UCMS 安全漏洞
UCMS is a content management system written in PHP. A security vulnerability exists in UCMS version 1.6, which stems from a file inclusion in the template management module...
CVE-2022-42234
Summary: CVE-2022-42234 is a file inclusion vulnerability in the template management module of UCMS 1.6. The Red Hat, NVD, and other feeds confirm a vulnerability in UCMS 1.6, with CVSSv3.1 impacts: CVSS 3.1 base score 8.8 (HIGH) across confidentiality, integrity, and availability, confirmed with...
Rocket LMS 1.6 Cross Site Scripting Vulnerability
Exploit Title: Rocket LMS - Learning Management System Reflected Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04...
PT-2022-23363 · WordPress · About Rentals Plugin
Name of the Vulnerable Software and Affected Versions: About Rentals plugin versions prior to 1.6 Description: The issue is related to a Missing Access Control vulnerability in the About Rentals plugin for WordPress. Recommendations: For versions prior to 1.6, update to version 1.6 or later to...
