8759 matches found
Sql injection
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
CVE-2016-10754
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
UBUNTU-CVE-2019-10066
An issue was discovered in Open Ticket Request System OTRS 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted calendar appointment ...
DEBIAN-CVE-2019-10066
An issue was discovered in Open Ticket Request System OTRS 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted calendar appointment ...
All-in-One Event Calendar Plugin for WordPress < 2.5.39 Cross-Site Scripting
The WordPress All-in-One Event Calendar Plugin installed on the remote host is affected by a stored Cross-Site Scripting XSS vulnerability due to improper sanitization of user-supplied input. Note that the scanner has not tested for these issues but has instead relied only on the application's...
[SECURITY] Fedora 30 Update: ytnef-1.9.3-1.fc30
Yerase's TNEF Stream Reader. Can take a TNEF Stream winmail.dat sent from Microsoft Outlook or similar products and extract the attachments, includ ing construction of Contact Cards & Calendar entries...
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...
WordPress Calendar Plugin < 1.3.11 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Description of the security update for SharePoint Enterprise Server 2016: May 14, 2019
None None...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
CVE-2018-18872
The vulnerability CVE-2018-18872 affects the WordPress Kieran O’Shea Calendar plugin prior to 1.3.11. It enables Stored XSS via the event_title field in wp-admin/admin.php?page=calendar add action or via the category name during calendar-categories creation. Root cause is insufficient validation/...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
WordPress Kieran O'Shea Calendar Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Kieran O'Shea Calendar plugin prior to version 1.3.11. The...
CVE-2019-11820
Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...
CVE-2019-11820
Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...
Information disclosure
Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...
CVE-2019-11820
Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...
CVE-2019-11820
Synology Calendar prior to 2.3.3-0620 contains an information exposure via the process environment that allows local users to obtain credentials through the command line. Affected product: Synology Calendar. Vulnerable item: process/environment handling leading to credential leakage. Impact: cred...
