2017-12 Security Update for Adobe Flash Player for Windows 10 Version 1709 for ARM64-based Systems (KB4053577)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-12 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x86-based Systems (KB4053577)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-12 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB4053577)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-12 Dynamic Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4054517)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2017-12 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x64-based Systems (KB4054520)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

DEBIAN-CVE-2017-16854

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

UBUNTU-CVE-2017-16854

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

CVE-2017-16854

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

PT-2017-14599

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 3.3.20 and earlier Open Ticket Request System OTRS versions 4.0.26 and earlier Open Ticket Request System OTRS versions 5.0.24 and earlier Open Ticket Request System OTRS versions 6.0.1 and earlier...

CVE-2017-16854: Exposure of Sensitive Information to an Unauthorized Actor

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

pantamusik.com XSS vulnerability

Open Bug Bounty ID: OBB-442008 Description| Value ---|--- Affected Website:| pantamusik.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

Cross site scripting

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

PT-2017-14658

Name of the Vulnerable Software and Affected Versions b3log Symphony aka Sym version 2.2.0 Description The issue allows for an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. Recommendations For version 2.2.0, as a temporary...

CVE-2017-16956: Improper Neutralization of Input During Web Page Generation

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

SQL Injection Vulnerability in JYmusic ArticleController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic ArticleController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

PT-2017-6711

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0 1.9.1 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to the "apps/app article/controller/rating.php"...

SQL injection vulnerability in SaxueArticle article management system money.php page

SaxueArticle article management system is a php+MySQL for the development of php article management system. A SQL injection vulnerability exists in the money.php page of the SaxueArticle article management system. The vulnerability stems from the program's failure to adequately filter...