27 matches found
CVE-2021-26947
Cross-site scripting XSS issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link...
CVE-2021-26947
CVE-2021-26947 is an XSS flaw in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier that allows remote attackers to inject arbitrary web script in a victim’s browser via a crafted link. Connected advisories confirm the issue across multiple sources (Debian DSA-5399-1, OSV, Nessu...
CVE-2021-26947
Cross-site scripting XSS issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link...
CVE-2022-26947
creationtimestamp| type| source ---|---|--- 2022-03-30 07:11:53+00:00| seen| https://t.me/cibsecurity/39787...
CVE-2022-26947
CVE-2022-26947 is a reflected XSS vulnerability in Archer 6.x through 6.9 SP3 (6.9.3.0). A remote authenticated Archer user could prompt a victim user to submit malicious HTML/JavaScript to the vulnerable web application, with the malicious code then reflected back and executed by the victim’s br...
CVE-2020-26947
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...
CVE-2020-26947
The CVE-2020-26947 entry concerns monero-wallet-gui in the Monero GUI prior to 0.17.1.0. The root cause is an embedded RPATH that includes the current directory (.) with precedence over /usr/lib, enabling a local attacker to gain privileges via a Trojan horse library placed in the current working...