24 matches found
XSS in Designer feature
PMASA-2018-3 Announcement-ID: PMASA-2018-3 Date: 2018-06-19 Updated: 2018-06-21 Summary XSS in Designer feature Description A Cross-Site Scripting vulnerability was found in the Designer feature, where an attacker can deliver a payload to a user through a specially-crafted database name. Severity...
CVE-2017-12581
CVE-2017-12581 affects GitHub Electron before 1.6.8, where a nodeIntegration bypass can bypass the Same Origin Policy and allow remote command execution. A privileged chrome-devtools:// URL could eval Node.js primitives (e.g., child_process.execFile), enabling OS commands on the user’s host. The ...
QEMU VirtFS Denial of Service Vulnerability (CNVD-2016-12581)
QEMU also known as Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast, cross-platform, etc. VirtFS is a customized virtualized file system for virtualized environments, belonging to the system layer virtualization...