11 matches found
CVE-2019-17557
It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string...
org.apache.syncope.ext.flowable:syncope-ext-flowable-client-enduser (>=2.1.3 <=2.1.14), org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.1.0 <=2.1.14) +1 more potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.1.0 <=2.1.5)
org.apache.syncope.client:syncope-client-enduser MAVEN version =2.1.0, =2.1.3, =2.1.0, =2.1.0, =2.1.14 Source cves: CVE-2019-17557 Source advisory: OSV:GHSA-6QJ8-C27W-RP33...
org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.0.10 <=2.0.14), org.apache.syncope.ext.saml2sp:syncope-ext-saml2sp-client-enduser (>=2.0.10 <=2.0.14) potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.0.10 <=2.0.14)
org.apache.syncope.client:syncope-client-enduser MAVEN version =2.0.10, =2.0.10, =2.0.10, =2.0.14 Source cves: CVE-2019-17557 Source advisory: OSV:GHSA-6QJ8-C27W-RP33...
CVE-2019-17557
creationtimestamp| type| source ---|---|--- 2020-05-04 16:59:25+00:00| seen| https://t.me/cibsecurity/11797...
CVE-2019-17557
CVE-2019-17557 describes a reflected XSS in the Apache Syncope EndUser UI login page, before versions 2.0.15 and 2.1.6, where the UI reflects the successMessage parameter in the URL query string, allowing an attacker to execute arbitrary JavaScript in a user’s browser. The issue is caused by insu...
CVE-2018-17557
The connected documents describe a security issue in the WordPress plugin Advanced Custom Fields (ACF) prior to version 5.7.8, with an XSS vulnerability in authors. Affected product: WordPress ACF plugin
Foxit PhantomPDF < 9.1 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid119838; scriptversion"1.6...
Foxit Reader BMP biWidth Heap-based Buffer Overflow (CVE-2017-17557)
A heap-based buffer overflow vulnerability exists in the BMP processing component of Foxit Reader. This vulnerability is due to improper validation of the biWidth field in a BMP file...
CVE-2017-17557
CVE-2017-17557: Foxit Reader < 9.1 and Foxit PhantomPDF
KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF
Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An unsafe DLL loading...