7 matches found
CVE-2026-87973
The If-So Dynamic Content WordPress plugin (versions 1.9.9 through 1.10.1 ) is vulnerable to Stored XSS due to a failure to sanitize conversion names before storage and a failure to escape them when rendering the analytics page. This allows users with editor-level access to inject and execute arb...
CVE-2021-39413
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
CVE-2021-39413
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
GitLab Access Control Error Vulnerability (CNVD-2021-26066)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab, which can be exploited by unauthorized user...
GitLab 安全漏洞
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab, which can be exploited by unauthorized user...
GitLab Information Disclosure Vulnerability (CNVD-2020-17383)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A security vulnerability exists in GitLab versions 8.3 through 12.8.1. An attacker can exploit the...
CVE-2013-5535: Undefined Security Weakness
The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419...