23 matches found
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to XSS vulnerability EBICS server (CVE-2025-14504)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability Vulnerability Details CVEID:CVE-2025-14504 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows an authenticated us...
Adobe Substance3D Designer Buffer Overflow Vulnerability (CNVD-2026-14504)
Adobe Substance3D Designer is a texture and material creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance3D Designer, which can be exploited by an attacker to execute arbitrary code in the current user environment...
CVE-2023-49943
Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS by a low-privileged technician via a task's name in a time sheet...
PT-2024-13838 · Zoho · Zoho Manageengine Servicedesk Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14504 Description: The issue allows stored XSS via a task's name in a time sheet, which can be exploited by a low-privileged technician. Recommendations: For versions prior to 14504,...
ZOHO ManageEngine ServiceDesk Plus Security Vulnerability
ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management module...
Debian: Security Advisory (DLA-1154-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1130-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rockwell (CVE-2020-14504) (deprecated)
This plugin has been deprecated as POINT I/O modules are not currently supported. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2022/05/19...
CVE-2020-14504
creationtimestamp| type| source ---|---|--- 2022-02-24 22:15:16+00:00| seen| https://t.me/cibsecurity/38056 2025-04-17 18:57:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12312...
CVE-2020-14504
Rockwell Automation 1734-AENTR Series B/C are affected by CVE-2020-14504 due to an improper access control in the web interface that mishandles HTTP POST authentication, enabling a remote, unauthenticated attacker to modify configuration settings. Affected series and firmware info from sources in...
CVE-2020-14504
The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings...
Rockwell Automation 1734-AENTR Series B and Series C
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: 1734-AENTR Series B and Series C Vulnerabilities: Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities...
CVE-2019-14504
CVE-2019-14504 is rejected/not used and does not represent an active vulnerability entry.
Fedora 30 : GraphicsMagick (2019-da4c20882c)
New bug and security fix release, see http://www.graphicsmagick.org/NEWS.htmljune-15-2019 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2018-14504
An issue was discovered in managefiltereditpage.php in MantisBT 2.x through 2.15.0. A cross-site scripting XSS vulnerability in the Edit Filter page allows execution of arbitrary code if CSP settings permit it when displaying a filter with a crafted name e.g., 'foobar" onclick="alert1'...
CVE-2018-14504
CVE-2018-14504 is an XSS vulnerability in MantisBT, affecting the Edit Filter page (manage_filter_edit_page.php) for MantisBT 2.x up to 2.15.0. A crafted filter name (for example, 'foobar" onclick="alert(1)') can trigger script execution when the filter is displayed, potentially enabling arbitrar...
openSUSE Security Update : GraphicsMagick (openSUSE-2017-1386)
This update for GraphicsMagick fixes the following issues : - CVE-2017-14042: Denial of service through a large memory allocation via specially crafted PNM images boo1056550 - CVE-2017-14504: NULL pointer dereference via specially crafted PNM images boo1059721 - CVE-2017-17498: Denial of service ...
[SECURITY] [DLA 1154-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u12 CVE ID : CVE-2017-14103 CVE-2017-14314 CVE-2017-14504 CVE-2017-14733 CVE-2017-14994 CVE-2017-14997 CVE-2017-15930 Debian Bug : 879999 Multiple vulnerabilities were found in graphicsmagick. CVE-2017-14103 The ReadJNGImage and ReadOneJNGImage...