9 matches found
CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2020-19284
creationtimestamp| type| source ---|---|--- 2021-09-10 02:30:30+00:00| seen| https://t.me/cibsecurity/28654...
CVE-2020-19284
A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...
CVE-2020-19284
A stored XSS vulnerability (CVE-2020-19284) affects Jeesns 1.4.2 in the /group/comment component, allowing an attacker to inject arbitrary scripts/HTML via the group comments text field. The connected sources consistently describe this as a stored XSS in that exact location; the root cause is des...
CVE-2019-19284
creationtimestamp| type| source ---|---|--- 2020-12-15 00:39:40+00:00| seen| https://t.me/cibsecurity/20792...
CVE-2019-19284
A vulnerability has been identified in XHQ All Versions 6.1. The web interface could allow Cross-Site Scripting XSS attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users...
CVE-2018-19284
CVE-2018-19284 is rejected/not used as stated in the Initial Description.
Product update: Virtuozzo Infrastructure Platform 2.5 Update 4 (2.5.0-1614)
This update provides stability and usability fixes. Vulnerability id: VSTOR-14144, VSTOR-20526 Blink button in the admin panel was not working in some cases. Vulnerability id: VSTOR-20197 Unable to create network bonds. Vulnerability id: VSTOR-20232 Disk replacement occasionally does not allow to...