QNAP QTS XSS Vulnerability (NAS-201911-26)

QNAP QTS is prone to a stored cross-site scripting vulnerability in QTS Event Notification. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Security fix for the ALT Linux 8 package freeipa version 4.3.3-alt20

4.3.3-alt20 built Nov. 28, 2019 Stanislav Levin in task 241733 Nov. 26, 2019 Stanislav Levin - Applied security patches fixes: CVE-2019-14867, CVE-2019-10195...

Session fixation in change password form

SilverStripe through 4.3.3 allows session fixation in the "change password" form...

Unspecified vulnerability in SilverStripe

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and previous versions of a security vulnerability. Attackers can...

SilverStripe Elevation of Privilege Vulnerability

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and previous versions of a security vulnerability. An attacker can...

CVE-2019-12617

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...

CVE-2019-12617

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...

CVE-2019-12203

SilverStripe through 4.3.3 allows session fixation in the "change password" form...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12204

In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12203

SilverStripe through 4.3.3 allows session fixation in the "change password" form...

Session fixation

SilverStripe through 4.3.3 allows session fixation in the "change password" form...

Cross site scripting

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe CVE-2019-12205 is a Flash Clipboard Reflected XSS vulnerability affecting SilverStripe 4.3.3 and earlier. The issue stems from insufficient validation of client-side data, enabling reflected cross-site scripting. Remediation known from multiple advisories: upgrading to SilverStripe f...

CVE-2019-12245

Summary: SilverStripe up to 4.3.3 is affected by an access-control weakness in protected files uploaded via Upload::loadIntoFile(). An attacker may guess a filename in silverstripe/assets using the AssetControlExtension, potentially exposing protected assets. Remediation details are not specified...

CVE-2016-10873

CVE-2016-10873 affects the WordPress wp-database-backup plugin prior to version 4.3.3, where an XSS vulnerability exists in the plugin’s handling of data. The Red Hat entry and CNVD/CVE records confirm a cross-site scripting flaw that can allow client-side code execution within affected pages. Th...

PT-2019-7669 · WordPress · Wp-Database-Backup

Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 4.3.3 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue...

[SECURITY] [DLA 1669-1] libreoffice security update

Package : libreoffice Version : 1:4.3.3-2+deb8u12 CVE ID : CVE-2018-16858 Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document. For Debian 8 "Jessie", this problem has been fixed in version...