1663 matches found
CVE-2021-30140
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...
CVE-2021-30140
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...
CVE-2021-30140
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...
Debian: Security Advisory (DLA-2619-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2619-1] python3.5 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2619-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 05, 2021 https://wiki.debian.org/LTS -...
DLA-2619-1 python3.5 - security update
Bulletin has no description...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19616
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19619
CVE-2020-19619 is a Cross‑Site Scripting (XSS) vulnerability affecting mblog 3.5, exploitable via the signature field on the /settings/profile page. The vulnerability is described across multiple sources as allowing injection of arbitrary web scripts/HTML through that field, with the issue locate...