18 matches found
CVE-2024-13332
The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2019-13332
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2024-13332
creationtimestamp| type| source ---|---|--- 2025-02-04 06:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdft6fq6e2f 2025-02-04 06:43:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113944257740323451 2025-02-04 08:02:12+00:00| seen|...
CVE-2024-13332
The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13332 TransFinanz <= 1.0.0 - Reflected XSS
The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
GitLab 8.11.0-rc6 < 13.2.10 / 13.3.0 < 13.3.7 / 13.4.0 < 13.4.2 (CVE-2020-13332)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2020-13332
creationtimestamp| type| source ---|---|--- 2020-10-07 18:28:19+00:00| seen| https://t.me/cibsecurity/15110...
CVE-2020-13332
CVE-2020-13332 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2019-13332
Foxit Reader 9.6.0.25114 is affected by a vulnerability in XFA form template processing. The issue arises from not validating the existence of an object before performing operations on it, leading to a use-after-free condition that can enable remote code execution. Exploitation requires user inte...
KLA11566 RCE vulnerability in Foxit Reader
Out-of-bounds reading vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability via specially designed document to execute arbitrary code or cause denial of service. Technical details Potentially vulnerable components are AcroForm, TIF File ConvertToPDF, JPG File...
CVE-2018-13332
Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows attackers to upload files to arbitrary locations via the "path" URL parameter...
CVE-2018-13332
Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows attackers to upload files to arbitrary locations via the "path" URL parameter...
CVE-2018-13332
CVE-2018-13332 concerns TerraMaster TOS. The connected documents confirm a directory traversal vulnerability in the explorer application of TerraMaster TOS version 3.1.03, which can be exploited to upload files to arbitrary locations via the URL parameter. The CVSS data provided indicates a high...
Session fixation
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
CVE-2018-12501
Nagios Fusion prior to 4.1.4 is affected by a cross-site scripting (XSS) vulnerability (CVE-2018-12501) in the web interface. The issue, also referred to as TPS#13332-13335, is documented across multiple sources (Red Hat, CNVD, NVD, CVE lists). The vulnerability arises in Nagios Fusion’s handling...
Fedora Update for ghc-X11-xft FEDORA-2013-13332
Check for the Version of ghc-X11-xft OpenVAS Vulnerability Test Fedora Update for ghc-X11-xft FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for xmonad FEDORA-2013-13332
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : bluetile-0.6-18.fc19 / ghc-X11-1.6.1.1-1.fc19 / ghc-X11-xft-0.3.1-10.fc19 / etc (2013-13332)
xmonad-contrib-0.11.2 fixes a vulnerability in the DynamicLog module - update X11 to 1.6.1.1 - update xmobar to 0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...