94 matches found
CVE-2023-51489
Cross-Site Request Forgery CSRF vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11...
CVE-2023-51488
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Reflected XSS.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11...
PT-2024-14147 · Unknown · Crowdsignal Dashboard – Polls
Name of the Vulnerable Software and Affected Versions: Crowdsignal Dashboard – Polls, Surveys & more versions n/a through 3.0.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS...
Security Bulletin: IBM Content Navigator is vulnerable to a Code Inject Exploit due to Daeja ViewOne Virtual (CVE-2023-40684)
Summary Daeja ViewOne Virtual is used by IBM Content Navigator as part of the document viewer. CVE-2023-40684. Vulnerability Details CVEID:CVE-2023-40684 DESCRIPTION: IBM Content Navigator with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to emb...
CVE-2023-40684
CVE-2023-40684 affects IBM Content Navigator on 3.0.11/3.0.13/3.0.14 when used with IBM Daeja ViewOne Virtual. The issue is a cross-site scripting vulnerability that lets a user embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Docum...
PT-2023-27599 · Ibm · Daeja Viewone Virtual +1
Name of the Vulnerable Software and Affected Versions: IBM Content Navigator versions 3.0.11 through 3.0.14 with IBM Daeja ViewOne Virtual Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...
Security Bulletin: IBM Content Navigator is vulnerable to DoS due to Apache Commons FileUpload (CVE-2023-24998)
Summary Apache Commons FileUpload is used by IBM Content Navigator as part of the file upload functionailty. CVE-2023-24998. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of reques...
CVE-2020-23258
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...
Design/Logic Flaw
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...
Design/Logic Flaw
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...
CVE-2020-23258
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...
Jsish 缓冲区错误漏洞
Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v.3.0.11 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service via the StringReplaceCmd function...
PT-2023-11643 · Jsish · Jsish
Name of the Vulnerable Software and Affected Versions: Jsish version 3.0.11 Description: An issue in Jsish allows a remote attacker to cause a denial of service via the Jsi ValueIsNumber function in the ./src/jsiValue.c file. Recommendations: For Jsish version 3.0.11, as a temporary workaround,...
CVE-2020-23259
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...
Jsish 代码问题漏洞
Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v.3.0.11 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service via the JsiStrlen function...
SUSE CVE-2009-1835
Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with...
SUSE CVE-2020-26664
A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...
VideoLAN VLC null pointer dereference vulnerability
VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs, and various streaming protocols. a null pointer dereference vulnerability exists in "Open" in avi.c in VideoLAN VLC version 3.0.11, which can be...