285 matches found
CVE-2020-14055
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
CVE-2020-14055
CVE-2020-14055 affects Monsta FTP versions 2.10.1 and earlier, with a stored XSS in the language setting caused by insufficient output encoding. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OpenVAS) as a stored XSS in Monsta FTP. Impact is user-facing script injection via ...
Security update for freetype2 (moderate)
openSUSE Security Update: Security update for freetype2 Announcement ID: openSUSE-SU-2020:0704-1 Rating: moderate References: 1079603 1091109 Cross-References: CVE-2018-6942 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...
SUSE-SU-2020:1353-1 Security update for freetype2
This update for freetype2 to version 2.10.1 fixes the following issues: Security issue fixed: - CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c bsc1079603. Non-security issues fixed: - Update to version 2.10.1 The bytecode hinting of OpenType variation fonts was flawed, since the...
Postfix Data Forgery Issue Vulnerability
Postfix is an open source mail transfer agent. A security vulnerability exists in Postfix version 2.10.1-7. An attacker can exploit the vulnerability to send mail by spoofing the sender...
PT-2020-13021 · Postfix · Postfix
Name of the Vulnerable Software and Affected Versions: Postfix version 2.10.1-7 Description: The issue allows an attacker to send an email from an arbitrary-looking sender via a homoglyph attack, as demonstrated by the similarity of xcexbf to the 'o' character. This is potentially relevant when t...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2020-24036)
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo version 2.10.1. The vulnerability stems from the lack of proper validation of...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
Cross site scripting
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
Cross site scripting
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
PVE: CVE-2020-8089 affects Piwigo 2.10.1 with a stored XSS in the Group Name Field on the group_list page. The issue stems from insufficient validation of client-side data, enabling potentially malicious input to be stored and reflected. Connected documents corroborate the vulnerability across mu...
