728 matches found
CVE-2020-5277
PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...
CVE-2020-5277
PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...
Cross site scripting
PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...
CVE-2020-5277
CVE-2020-5277 affects the PrestaShop module ps_facetedsearch. The vulnerability is a reflected XSS in the url_name parameter for versions before 3.5.0; fixed in 3.5.0. Connected documents confirm the affected product/module and the fix version. Remediation: upgrade to ps_facetedsearch 3.5.0 or la...
GHSA-QXF4-CHVG-4R8R vulnerabilities
Vulnerabilities for packages: spark-compat...
Knockout.js < 3.5.0-beta Cross-site Scripting
According to its self-reported version number, Knockout.js is prior to 3.5.0-beta. Therefore, it may be affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...
CVE-2020-1938 vulnerabilities
Vulnerabilities for packages: spark-compat...
phpList Authentication Bypass Vulnerability
phpList is an open source newsletter and email marketing software from phpList UK. An authentication bypass vulnerability exists in phpList version 3.5.0, which can be exploited by remote attackers to bypass the authentication of an administrator's account, due to the program's failure to correct...
PT-2020-20200 · Phplist · Phplist
Name of the Vulnerable Software and Affected Versions: phpList version 3.5.0 Description: The issue allows for admin login bypass due to type juggling. This occurs because the code uses == for password hash comparison instead of ===, which can mishandle hashes starting with 0e followed by numeric...
phpList 3.5.0 - Authentication Bypass
phpList 3.5.0 - Authentication Bypass Exploit Title: phpList 3.5.0 - Authentication Bypass Google Dork: N/A Date: 2020-02-03 Exploit Author: Suvadip Kar Author Contact: https://twitter.com/spidersec Vendor Homepage: https://www.phplist.org Software Link: https://www.phplist.org/download-phplist/...
PT-2020-20145 · Trend Micro · Ossec-Hids
Name of the Vulnerable Software and Affected Versions: OSSEC-HIDS versions 2.7 through 3.5.0 Description: The issue arises from the OS CleanMSG function in ossec-analysisd, which fails to remove or encode terminal control characters or newlines from processed log messages. This can lead to the...
PT-2020-20147 · Trend Micro · Ossec-Hids
Name of the Vulnerable Software and Affected Versions: OSSEC-HIDS versions 2.7 through 3.5.0 Description: The server component responsible for log analysis, ossec-analysisd, is vulnerable to a use-after-free during processing of syscheck formatted msgs. These messages are received from...
GHSA-HH3J-X4MC-G48R vulnerabilities
Vulnerabilities for packages: spark-compat...
GHSA-9XCJ-C8CR-8C3C vulnerabilities
Vulnerabilities for packages: spark-compat...
CVE-2019-17563 vulnerabilities
Vulnerabilities for packages: spark-compat...
Apache ZooKeeper < 3.4.14, 3.5.0-alpha - 3.5.4-beta Information Disclosure Vulnerability
Apache ZooKeeper is prone to an information disclosure vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2019-10172 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2019-10202 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2019-15891
An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection...