6 matches found
CVE-2019-16687
Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation...
CVE-2020-16687
CVE-2020-16687 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.
CVE-2020-16687
...
CVE-2019-16687
Dolibarr 9.0.5 is affected by CVE-2019-16687: stored XSS in a User Profile signature (card.php). A user with the privilege to create/modify other users, groups and permissions can inject script and can also achieve privilege escalation. The connected sources confirm the vulnerability; exploitatio...
CVE-2017-16687
CVE-2017-16687 concerns the SAP HANA ecosystem where the user self-service tools in the SAP HANA extended application services (classic user self-service) in SAP HANA Database versions 1.00 and 2.00 can be misused to enumerate usernames. An unauthenticated user could leverage error messages to de...
Fedora 13 : bristol-0.40.7-7.fc13 (2010-16687)
This update stops altering LDLIBRARYPATH for Bristol insecurely at runtime. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...