363 matches found
CVE-2022-40755
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jasimage.c...
Cross site scripting in actionpack Rubygem
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
PT-2022-12990 · WordPress · Visual Form Builder
Name of the Vulnerable Software and Affected Versions: Visual Form Builder WordPress plugin versions prior to 3.0.6 Description: The issue allows unauthenticated users to see form entries or export them as a CSV file due to a lack of access control on entry form export. This can be done using the...
Path manipulation
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php. The issue was fixed in version 3.0.6...
PYSEC-2022-21
Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products.ATContentTypes prior to version 3.0.6 are vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the imageviewfullscre...
WordPress Smart SEO Tool plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions prior to 3.0.6 of the Smart SEO Tool plugin for WordPress, which...
WordPress Smart SEO Tool 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions prior to 3.0.6 of the Smart SEO Tool plugin for WordPress, which...
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
The plugin does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting With the "TDK optimization" setting enabled 7th page, first one: https://example.com/?s=123456"alert/XSS...
Debian: Security Advisory (DLA-2825-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress ImageBoss plugin <= 3.0.5 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Chevon Phillip in WordPress ImageBoss plugin versions = 3.0.5. Solution Update the WordPress ImageBoss plugin to the latest available version at least 3.0.6...
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
Cross site scripting
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
Rails 跨站脚本漏洞
Rails is a set of open source web application frameworks based on the Ruby language from the Rails team. A cross-site scripting vulnerability exists in the autolink function in versions prior to Rails 3.0.6. No more information on this vulnerability is available at this time, so stay tuned to CNN...
Integer overflow
Integer overflow vulnerability in function JsiObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code...
IBM Financial Transaction Manager 授权问题漏洞
IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platforms from IBM, USA. The product is primarily used to monitor, track and report on financial payments and transactions. An authorization issue vulnerability exists...
PT-2020-14293 · Nette +1 · Nette +1
Name of the Vulnerable Software and Affected Versions: Nette versions prior to 2.0.19 Nette versions prior to 2.1.13 Nette versions prior to 2.2.10 Nette versions prior to 2.3.14 Nette versions prior to 2.4.16 Nette versions prior to 3.0.6 Description: The issue allows for a code injection attack...
Froala WYSIWYG HTML Editor Cross-Site Scripting Vulnerability
Froala WYSIWYG HTML Editor is a U.S. Froala company's Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in Froala WYSIWYG HTML Editor versions 3.0.6 through 3.1.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. A...
UBUNTU-CVE-2019-19553
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection...