15 matches found
CVE-2026-13083 Pen-drive: pen-drive: stored xss via unescaped cluster data in html report
A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrator privileges can inject a stored cross-site scripting XSS payload into cluster objects such as ClusterVersion...
CVE-2025-13083 Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before...
CVE-2025-13083 Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before...
CVE-2019-13083
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...
CVE-2024-13083
A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...
CVE-2024-13083 PHPGurukul Land Record System admin-profile.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...
CVE-2024-13083 PHPGurukul Land Record System admin-profile.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...
CVE-2024-13083
CVE-2024-13083 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting (XSS) vulnerability in an unknown function of the file /admin/admin-profile.php, triggered by manipulating the Admin Name parameter. The vulnerability can be exploited remotely and the exploit has been d...
CVE-2020-13083
CVE-2020-13083 entry is rejected/not used and does not represent an active vulnerability.
CVE-2019-13083
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...
CVE-2019-13083
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...
CVE-2019-13083
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...
CVE-2019-13083
Affected software: XnView Classic 2.48. The CVE-2019-13083 entry describes a User Mode Write AV starting at xnview+0x0000000000384e2a. CVSS metrics in the NVD indicate a HIGH impact (CVSS3.0: base score 7.8, LOCAL, privileges NONE, user interaction REQUIRED; confidentiality/ integrity/ availabili...
CVE-2017-13083
CVE-2017-13083 relates to Akeo Consulting Rufus (pre-2.17.1187) failing to securely validate downloads over HTTP, allowing a MITM to cause arbitrary code execution via manipulated updates. Affected: Rufus before 2.17.1187. Root cause: update integrity checked but not validated against a trusted C...