506 matches found
CVE-2019-16467
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
Cross site scripting
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
Command injection
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...
Cross site scripting
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
Cross site scripting
Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2019-8084
Adobe Experience Manager 6.x (versions 6.5, 6.4, 6.3 and 6.2) contain a reflected cross-site scripting vulnerability (CVE-2019-8084). Exploitation could lead to sensitive information disclosure. The available documents describe the vulnerability and affected versions but do not provide concrete r...
CVE-2019-8080
CVE-2019-8080 affects Adobe Experience Manager 6.3 and 6.4 (and related 6.5 lines) with a stored cross-site scripting vulnerability that, when exploited, can lead to privilege escalation. The public description states the issue is a stored XSS in AEM, enabling elevation of privileges under certai...
CVE-2019-8089
Adobe Experience Manager Forms (AEM Forms) versions 6.3–6.5 are affected by a reflected cross-site scripting (XSS) vulnerability due to insufficient sanitization of user input. Successful exploitation could lead to disclosure of sensitive information. Multiple connected sources confirm the issue ...
CVE-2019-9855
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...
CVE-2019-9854
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...
Synology Photo Station SQL Injection Vulnerability (CNVD-2017-27712)
Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in the synophotocsPhotoDB.php file in Synology Photo Station versions prior to 6.8.11-3489 and prior to 6.3-2977. The vulnerabili...
Synology Photo Station Path Traversal Vulnerability
Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A path traversal vulnerability exists in SYNO.PhotoStation.File in Synology Photo Station versions prior to 6.8.11-3489 and prior to 6.3-2977. A remote attacker can...
PT-2019-12509 · Synology · Synology Photo Station
Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.11-3489 Synology Photo Station versions prior to 6.3-2977 Description: The issue allows remote attackers to upload arbitrary files via the uploadphoto parameter, due to a relative path traversal...
Azure File Sync Agent v6.3 Release – June 2019 (KB4489739)
Update for Azure File Sync agent version 6.3.0.0. For more details, see the associated Microsoft Knowledge Base article...
CVE-2019-0314
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
Design/Logic Flaw
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0314
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
Cross site scripting
Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2019-7129
Adobe Experience Manager Forms (AEM Forms) versions 6.2–6.4 contain a stored cross‑site scripting vulnerability. The root cause is insufficient validation of client‑side data by the web application, which could enable an attacker to disclose sensitive information. This CVE (CVE-2019-7129) is docu...