May 4, 2021, update for Outlook 2016 (KB5001921)

None None...

CVE-2020-22807

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...

CVE-2020-22807

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...

Sql injection

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...

CVE-2020-22807

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...

CVE-2020-22807

Vulnerability summary (CVE-2020-22807) : vtiger CRM 7.2 is affected by a SQL Injection in the calendar exportdata feature caused by a faulty input handling (described as a union SQL injection). This could allow a remote attacker to execute arbitrary SQL commands on the vulnerable system (no authe...

vtiger crm SQL注入漏洞

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in vtiger crm 7.2 that originates from a...

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-44305)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Booking Calendar versions prior to...

Fedora: Security Advisory for seamonkey (FEDORA-2021-d1fdd76443)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 34 Update: seamonkey-2.53.7-3.fc34

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

CVE-2021-24232

The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue...

Cross site scripting

The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue...

CVE-2021-24232 Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)

The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Booking Calendar versions prior to...

WordPress plugin cross-site scripting vulnerability (CNVD-2021-34527)

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Advanced Booking Calendar prior to version 1.6.7. The vulnerability stems from the plugin not clearing the GET parameter in the "Seasons and Calendars" page, an...

CVE-2021-24225

The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue...

CVE-2021-24225

The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue...

Cross site scripting

The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue...

CVE-2021-24225

CVE-2021-24225 affects the WordPress plugin Advanced Booking Calendar (pre-1.6.7). The vulnerability is an authenticated, reflected XSS caused by not sanitising the calId GET parameter on the Seasons & Calendars page, with output in an A tag. Exploitation details and PoCs exist in connected sourc...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Advanced Booking Calendar prior to version 1.6.7. The vulnerability stems from the plugin not clearing the GET parameter in the "Seasons and Calendars" page, an...