6700 matches found
Cross site scripting
MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks...
CVE-2009-2802
MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks...
CVE-2009-2802
Affected product: MantisBT 1.2.x prior to 1.2.2. Vulnerability arises from insecure handling of attachments and MIME types, allowing arbitrary inline attachment rendering that could enable cross-domain scripting or other browser attacks. Root cause: improper attachment/MIME processing in the lega...
PT-2020-3640 · Roundcube +3 · Roundcube Webmail +3
Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions prior to 1.3.12 Roundcube Webmail versions 1.4.x prior to 1.4.5 Description: The issue is related to insufficient protection measures for web page structures in Roundcube Webmail, allowing a remote attacker to impac...
Recommended update for MozillaThunderbird (important)
openSUSE Security Update: Recommended update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:2464-1 Rating: important References: 1149126 1149429 1151186 1152778 1153879 1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762...
PT-2021-24018 · Roundcube +3 · Roundcube +3
Name of the Vulnerable Software and Affected Versions: Roundcube versions prior to 1.3.17 Roundcube versions 1.4.x prior to 1.4.12 Description: The issue is related to XSS in handling an attachment's filename extension when displaying a MIME type warning message. Recommendations: For versions pri...
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint...
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint...
Default credentials
Pagure: XSS possible in file attachment endpoint...
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint...
CVE-2016-1000037
CVE-2016-1000037 is a Pagure XSS issue in the file attachment endpoint. The connected sources describe a cross-site scripting vulnerability caused by insufficient validation of client-side data in the web application, enabling potential execution of client-side code. Affected software is Pagure (...
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint...
CVE-2019-1877 Cisco Enterprise Chat and Email Attachment Download Vulnerability
A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...
CVE-2019-1877 Cisco Enterprise Chat and Email Attachment Download Vulnerability
A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...
Open-Xchange: Unchecked URL in attachment datasource
Implementation of com.openexchange.url.mail.attachment datasource does no validation of url parameter. Any URL supported by Java's URLConnection can be read. Attached is an exploit which reads /etc/hostname file from sandbox server. Impact Any URL supported by Java's URLConnection can be read...
CVE-2019-4409
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...
FreeBSD : mongodb -- Attach IDs to users (880bca8f-e201-11e9-8af7-08002720423d)
Mitch Wasson of Cisco's Advanced Malware Protection Group reports : After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones...
Keybase: Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature
Summary I've tested this vulnerability on Windows 10, with last keybase client. If a user click on "Download file" during a chat, an attacker can write files anywhere in userland. When downloading a file from a chat, the file should always be written in "Downloads" folder. Proof of concept You ne...