1068 matches found
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
Authorization
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, a reflected XSS in the user/login redirect GET parameter affects the authorization component, allowing execution of JavaScript in the login after-action script. Red Hat and other linked sources confirm the same issue exists across vendors; the vulnerability is tied to the...
CVE-2019-18350: Improper Neutralization of Input During Web Page Generation
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
PT-2019-15364
Name of the Vulnerable Software and Affected Versions Ant Design Pro version 4.0.0 Description The issue concerns a reflected XSS in the user/login redirect GET parameter, which affects the authorization component. This leads to the execution of JavaScript code in the login after-action script...
File Upload Vulnerability in Big Ant Instant Messenger
Big Ant Instant Messenger is a cross-platform instant messaging software. A file upload vulnerability exists in Big Ant Instant Messenger, which can be exploited by an attacker to gain server privileges...
Bluetooth Authentication Authorization Bypass Vulnerability in Little Ant Microscan Camera M1
The Ant Microscan Camera M1 is a microscan camera with built-in Bluetooth and wireless capabilities that allow photos to be transferred to a cell phone. A Bluetooth authentication authorization bypass vulnerability exists in the Ant Microsingle Camera M1. An attacker can use this vulnerability to...
China Ant Sword XSS and RCE Vulnerabilities
China AntSword antSword is an open source cross-platform website management tools. China antSword has XSS and RCE vulnerabilities that can be exploited by attackers to execute code...
openSUSE Security Update : ant (openSUSE-2019-729)
This update for ant fixes the following issues : Security issue fixed : - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053 This update was imported from the...
Fedora 28 : ant (2018-cba3ccd747)
Backport fix for arbitrary file write vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
openSUSE: Security Advisory for ant (openSUSE-SU-2018:2895-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : ant (openSUSE-2018-1057)
This update for ant fixes the following issues : Security issue fixed : - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053 This update was imported from the...
Security update for ant (moderate)
This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053 This update was imported from the SUSE:SLE-15:Updat...
SUSE-SU-2018:2866-1 Security update for ant
This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053...
SUSE-SU-2018:2838-1 Security update for ant
This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053...
SUSE-SU-2018:2789-1 Security update for ant
This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053 Other changes made: - Removed support for javadoc -...
DependencyCheck v3.3.1 - A Software Composition Analysis Utility That Detects Publicly Disclosed Vulnerabilities In Application Dependencies
Dependency-Check is a Software Composition Analysis SCA tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generat...