31 matches found
CVE-2017-9452
CVE-2017-9452 describes a cross-site scripting (XSS) vulnerability in the Piwigo web photo gallery. The issue is in the admin.php handler where the parameter page can be manipulated to inject arbitrary script or HTML. Affected software: Piwigo 2.9.0 and earlier. Impact: remote attackers could exe...
mtb.com XSS vulnerability
Vulnerable URL: https://www.mtb.com/search?k=%22%2D%2D%3E%20%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28document%2Ecookie%29%3B%27%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:22 GMT Vulnerability type:| XSS Vulnerability status:|...
Fedora Update for drupal7 FEDORA-2016-ff9a74c6dc
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal Multiple Vulnerabilities (Dec 2016) - Linux
Drupal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...
CVE-2016-9452
Removed by vendor...
CVE-2016-9452
CVE-2016-9452 affects Drupal Core via the transliterate mechanism in Drupal 8.x (pre-8.2.3). A specially crafted URL can cause a denial of service, potentially stopping the application. Affected product: Drupal Core 8.x before 8.2.3. Root cause: issue in transliterate handling that can be trigger...
Drupal 7.x < 7.52 / 8.x < 8.2.3 Multiple Vulnerabilities
The version of Drupal running on the remote web server is 7.x prior to 7.52 or 8.x prior to 8.2.3. It is, therefore, affected by the multiple vulnerabilities : - An information disclosure vulnerability exists in the taxonomy module when using access query tags that are inconsistent with the...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005
Description Inconsistent name for term access query Less critical - Drupal 7 and Drupal 8 Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by implementing...
CVE-2014-9452
Directory traversal vulnerability in VDG Security SENSE formerly DIVA 2.3.13 allows remote attackers to read arbitrary files via a .. dot dot in the default URI to images/...
CVE-2014-9452
CVE-2014-9452 affects VDG Security SENSE (formerly DIVA) 2.3.13. The issue is a directory traversal vulnerability allowing remote attackers to read arbitrary files by using a “..” sequence in the default URI to images/. Root cause: insufficient URI path sanitization in the image endpoint. Impact:...
