68 matches found
CVE-2023-5873 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 11.1.0...
CVE-2023-5873
CVE-2023-5873 is a stored XSS vulnerability affecting pimcore/pimcore prior to 11.1.0. The issue arises from storing user input that is later displayed without proper validation, leading to cross-site scripting in contexts where the Pimcore web interface or related components render stored input....
CVE-2012-5873
creationtimestamp| type| source ---|---|--- 2023-04-26 07:30:30+00:00| seen| https://t.me/cibsecurity/62880 2025-02-06 02:40:19+00:00| seen| Telegram/xJakhf0XtSKNu3PrrkBKw3i2TQ71viiQC8nHpCtqbAqSHfGC...
CVE-2012-5873
ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...
CVE-2012-5873
ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...
CVE-2012-5873
ARC (aka ARC2) up to 2011-12-01 is affected by a reflected XSS through the end_point.php query parameter when action output=htmltab is used. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, and enrichment feeds) with a common description: input reflected in HTML o...
CVE-2012-5873
ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...
K03585731: F5 secure shell vulnerability CVE-2020-5873
Security Advisory Description A user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands using a maliciously crafted scp request. CVE-2020-5873 Impact An authenticated user wit...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Go Text vulnerabilities (USN-5873-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5873-1 advisory. It was discovered that Go Text incorrectly handled certain encodings. An attacker could possibly use this issue to cause a denial...
SUSE CVE-2018-5873
An issue was discovered in the nsgetpath function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Andro...
alifoodsrl.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159015 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-5873
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...
CVE-2020-5873
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...
CVE-2020-5873
CVE-2020-5873 affects BIG-IP and BIG-IQ: a Resource Administrator user with access to scp but not bash can run arbitrary commands via a crafted scp request. The issue has been partially addressed by vendor advisories; fixes are issued in multiple tracks: BIG-IP 15.x (fix in 15.1.0, with other bra...
F5 Networks BIG-IP : F5 secure shell vulnerability (K03585731)
A user associated with the Resource Administrator role who has access to the secure copy scp utilitybut does not have access to Advanced Shell bashcan execute arbitrary commands using a maliciously crafted scp request.CVE-2020-5873 Impact An authenticated user with Resource Administrator role can...
CVE-2019-5873
Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2019-5873
Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
UBUNTU-CVE-2019-5873
Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2019-5873
CVE-2019-5873 affects Google Chrome on iOS prior to 77.0.3865.75, where insufficient policy validation in navigation allows a remote attacker to spoof the Omnibox (URL bar) contents via a crafted HTML page. Connected advisories corroborate the same vulnerability and indicate the fixed version is ...
Fedora 31 : chromium (2019-9a5e81214f)
Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...