16 matches found
CVE-2025-13209
CVE-2025-13209 affects bestfeng oa_git_free up to version 9.5. The vulnerability lies in the updateWriteBack function (file yimioa-oa9.5/server/c-flow/src/main/java/com/cloudweb/oa/controller/WorkflowPredefineController.java), where manipulation of the writeProp argument can trigger an XML Extern...
CVE-2024-13209
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structureid=1id=1=1=editart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting...
CVE-2024-13209
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...
CVE-2024-13209
creationtimestamp| type| source ---|---|--- 2025-01-09 03:21:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113796243062953907 2025-01-09 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxhbets2a 2025-01-09 04:38:47+00:00| seen|...
CVE-2024-13209
The CVE describes a cross-site scripting (XSS) vulnerability in Redaxo CMS 5.18.1. Affected is an unknown function in /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the Structure Management Page; manipulating the Article Name argument can be exploited...
CVE-2024-13209 Redaxo CMS Structure Management Page index.php cross site scripting
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...
CVE-2024-13209 Redaxo CMS Structure Management Page index.php cross site scripting
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...
CVE-2020-13209
The CVE-2020-13209 entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2019-13209
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is...
CVE-2019-13209
CVE-2019-13209 affects Rancher Server 2.x up to 2.2.4, vulnerable to Cross-Site Websocket Hijacking (CSWSH). The attack requires a logged-in Rancher user to visit a third-party site hosted by the attacker; the attacker can then issue commands against the cluster’s Kubernetes API using the victim’...
CVE-2019-13209
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is...
CVE-2018-13209
The CVE-2018-13209 entry concerns Nectar (NCTR), an Ethereum token, where the sell function of its smart contract exhibits an integer overflow. The issue arises because the calculation amount * sellPrice can yield zero, which can incorrectly reduce a seller’s assets. The available connected docum...
CVE-2017-13209
This CVE (CVE-2017-13209) affects Android 8.0–8.1 and is due to an insecure permissions check in ServiceManager::add of the hardware service manager. The check based on the caller’s PID could allow an application or service to replace a HAL service with its own, enabling local elevation of privil...
CVE-2017-13209
creationtimestamp| type| source ---|---|--- 2018-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43513...
Doomsday 1.8/1.9 - Multiple Remote Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17369/info Doomsday is prone to multiple remote format-string vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute...