1237 matches found
WordPress Clever Addons for Elementor plugin <= 2.0.15 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Ramuel Gall Wordfence in WordPress Clever Addons for Elementor plugin versions = 2.0.15. Solution Update the WordPress Clever Addons for Elementor plugin to the latest available version at least 2.1.0...
CVE-2019-10196
A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an...
Nathan Rajlich node-http-proxy-agent 安全漏洞
Nathan Rajlich node-http-proxy-agent is an open source application by Nathan Rajlich. Provides an implementation of http.Agent to connect to a specified HTTP or HTTPS proxy server, and can be used with the built-in http module. A security vulnerability exists in http-proxy-agent prior to version...
Security Bulletin: IBM Security Privileged Identity Manager is affected by remote code execution (CVE-2020-4450)
Summary IBM Security Privileged Identity Manager has addressed an issue for WebSphere Application Server which is vulnerable to a Remote Command Execution vulnerability. Vulnerability Details CVEID: CVE-2020-4450 DESCRIPTION: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a...
Vulnerability allowing for reading internal HTTP resources
Impact The vulnerability allows for reading and outputting files served by other services on the internal network in which the export server is hosted. If the export server is exposed to the internet, this potentially allows a malicious user to gain read access to internal web-resources. The impa...
PT-2021-17738 · Npm · Is-Svg
Name of the Vulnerable Software and Affected Versions: is-svg package versions 2.1.0 through 4.2.1 Description: The issue concerns a Regular Expression Denial of Service ReDoS vulnerability in the is-svg package for Node.js. If an attacker provides a malicious string, the package will get stuck...
Security Bulletin: IBM Security Privileged Identity Manager is affected by an information disclosure (CVE-2020-4329)
Summary IBM Security Privileged Identity Manager has addressed an issue for Information disclosure in WebSphere Application Server - Liberty. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could all...
Security Bulletin: IBM Security Privileged Identity Manager is affected by an information disclosure vulnerability (CVE-2020-4449)
Summary IBM Security Privileged Identity Manager has addressed an issue for WebSphere Application Server traditional is vulnerable to a Information Disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4449 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional...
CVE-2020-22643
Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...
CVE-2020-22643
Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...
CVE-2020-35707
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...
CVE-2020-35705
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...
CVE-2020-35706
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...
CVE-2020-35704
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...
CVE-2020-35704
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...