362 matches found
SUSE: Security Advisory (SUSE-SU-2020:3380-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-5017, CVE-2020-5018, CVE-2020-5019, CVE-2020-5020, CVE-2020-5021, CVE-2020-5022)
Summary IBM Spectrum Protect Plus is vulnerable to exposure of sensitive data, clickjacking, HTTP header injection, failure to invalidate sessions, and unauthorized access to information. Vulnerability Details CVEID: CVE-2020-5018 DESCRIPTION: IBM Spectrum Protect Plus may include sensitive...
PT-2020-17384 · Bigprof · Bigprof Online Invoicing System
Name of the Vulnerable Software and Affected Versions: BigProf Online Invoicing System versions prior to 2.9 Description: The issue is related to an unauthenticated SQL Injection in the /membership passwordReset.php endpoint, which is used for self-service password resets. An attacker can send a...
PT-2020-16358 · Xmlsoft +1 · Libxml2 +1
Name of the Vulnerable Software and Affected Versions: TYPO3 versions 10.4.0 through 10.4.9 Description: The issue concerns XML external entity processing in RSS widgets, which is reasonable but theoretical, as it could not be reproduced with current PHP versions of supported and maintained syste...
CVE-2020-23654
NavigateCMS 2.9 is affected by Cross Site Scripting XSS via the module "Shop."...
CVE-2020-23654
NavigateCMS 2.9 is affected by Cross Site Scripting XSS via the module "Shop."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23656
CVE-2020-23656 affects NavigateCMS 2.9, with a Cross Site Scripting (XSS) flaw in the Content module. The available sources consistently identify the affected component as the Content module, but they do not provide specifics about the payload, exploit path, affected subcomponents, or exact versi...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross-Site Scripting (XSS) in the Configuration module (CVE-2020-23655). The connected documents consistently identify XSS as the vulnerability type and the affected component/module, with no detailed exploit steps, vectors, or affected versions beyond NavigateCMS 2...