293 matches found
openITCOCKPIT Code Injection Vulnerability
openITCOCKPIT is a set of open source system monitoring tools . A code injection vulnerability exists in versions of openITCOCKPIT prior to 3.7.1. The vulnerability arises from external input data to construct code segments in the process , the network system or product is not properly filtered f...
openITCOCKPIT Cross-Site Scripting Vulnerability
openITCOCKPIT is a set of open source system monitoring tools . openITCOCKPIT 3.7.1 before the version of the cross-site scripting vulnerability , the vulnerability stems from the lack of WEB applications on the client data to the correct validation , an attacker can exploit the vulnerability to...
openITCOCKPIT Cross-Site Request Forgery Vulnerability
openITCOCKPIT is a set of open source system monitoring tools . A cross-site request forgery vulnerability exists in versions prior to openITCOCKPIT 3.7.1. An attacker can exploit this vulnerability to send unintended requests to the server via an affected client...
CVE-2019-15492
openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...
CVE-2019-15494
OpenITCOCKPIT before version 3.7.1 is affected by an SSRF vulnerability (CVE-2019-15494). The issue arises in the affected component/functionality as described in the sources, with a fixed release available as openITCOCKPIT-3.7.1. The connected documents confirm the vulnerability and the remediat...
CVE-2019-15492
openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...
UBUNTU-CVE-2019-10187
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to...
Design/Logic Flaw
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to...
UBUNTU-CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
Stormshield Network Security Cross-Site Scripting Vulnerability
Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A cross-site scripting vulnerability exists in the command line interface of the SNS web server in Stormshield Network Security versions 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1...
CVE-2018-20780
Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...
CVE-2018-20779
Traq 3.7.1 allows SQL Injection via a tickets?search= URI...
CVE-2018-20779
Traq 3.7.1 allows SQL Injection via a tickets?search= URI...
CVE-2018-20780
Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...
Cross site request forgery (csrf)
Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...
Sql injection
Traq 3.7.1 allows SQL Injection via a tickets?search= URI...
CVE-2018-20779
Traq 3.7.1 allows SQL Injection via a tickets?search= URI...
CVE-2018-20779
The connected sources confirm a concrete vulnerability in Traq 3.7.1: an SQL Injection via the URI parameter tickets?search=, caused by insufficient input validation. Affected component is the Traq web application (PHP-based project management/issue tracker) and the flaw enables manipulation of S...
CVE-2018-20780
The CVE-2018-20780 entry concerns Traq 3.7.1, where a cross-site request forgery allows an attacker to trigger creation of an admin account (group_id=1). The vulnerability is CSRF in the web application, enabling unauthorized admin account creation without requiring user interaction beyond a craf...