CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197

CVE-2023-1197 is a Stored XSS vulnerability in uvdesk/community-skeleton prior to 1.1.0. Multiple sources describe the issue as a Stored XSS affecting the UVDesk Community Skeleton web app, with exploitation tied to storing and displaying unvalidated user input. The commonly cited remediation is ...

CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

SUSE CVE-2010-1197

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting XSS...

SUSE CVE-2017-7516

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2022-1197

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a...

CVE-2022-1197

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a...

CVE-2022-1197

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a...

CVE-2022-1197

CVE-2022-1197 concerns Thunderbird’s handling of OpenPGP revocation. According to the provided docs, when importing a revoked key that used the revocation reason “key compromise,” Thunderbird failed to update the existing non-revoked copy, leaving it effectively unrevoked. Revocations that used a...

Zimbra Collaboration Suite TAR Path Traversal Exploit

This Metasploit module creates a .tar file that can be emailed to a Zimbra server to exploit CVE-2022-41352. If successful, it plants a JSP-based backdoor in the public web directory, then executes that backdoor. The core vulnerability is a path-traversal issue in the cpio command-line utility th...

CVE-2015-1197

creationtimestamp| type| source ---|---|--- 2022-10-14 15:31:01+00:00| exploited| https://t.me/truesecator/3564 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:36+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

Amazon Linux 2 : thunderbird (ALAS-2022-1789)

The version of thunderbird installed on the remote host is prior to 91.8.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1789 advisory. The Mozilla Foundation Security Advisory describes this flaw as: NSSToken objects were referenced via direct points,...

CVE-2014-1197

CVE-2014-1197 concerns GNU Cpio 2.11 where the --no-absolute-filenames option can be bypassed via symlinks during extraction, allowing rogue archives to write files outside the current directory. Mageia MGASA-2015-0080 documents this issue (CVE-2014-1197) and references a fix in updated cpio pack...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:1176-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1176-1 advisory. - Updated to version 91.8 bsc1197903: - CVE-2022-1097: Fixed a memory corruption issue with...

SUSE: Security Advisory (SUSE-SU-2022:1176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 8 : thunderbird (RHSA-2022:1303)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1303 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.8.0. Security Fixes: Mozilla:...

RHEL 8 : thunderbird (RHSA-2022:1326)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1326 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.8.0. Security Fixes: Mozilla:...

Debian: Security Advisory (DLA-2978-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...