Lucene search
+L

8759 matches found

Microsoft KB
Microsoft KB
added 2018/04/17 7:01 a.m.38 views

Description of Calendar Printing Assistant for Office Outlook 2007 SP3

Describes the improvements that Calendar Printing Assistant for Office Outlook 2007 SP3 provides and the issues that it fixes.IntroductionCalendar Printing Assistant for Microsoft Office Outlook 2007 Service Pack 3 SP3 provides the latest updates to Calendar Printing Assistant for Office Outlook...

0.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2018/04/13 8:25 p.m.9 views

indypl.org XSS vulnerability

Open Bug Bounty ID: OBB-601627 Description| Value ---|--- Affected Website:| indypl.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Patchstack
Patchstack
added 2018/04/05 12:00 a.m.11 views

WordPress My Calendar plugin <=2.5.16 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found in WordPress My Calendar plugin versions =2.5.16. Solution Update the WordPress My Calendar plugin to the latest available version at least 2.5.17...

1.8AI score
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2018/04/04 2:49 a.m.7 views

calendar-365.com XSS vulnerability

Open Bug Bounty ID: OBB-596565 Description| Value ---|--- Affected Website:| calendar-365.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2018/04/04 12:00 a.m.13 views

My Calendar <= 2.5.16 - Authenticated Cross-Site Scripting (XSS)

An authenticated user, who can add new events, can inject arbitrary javascript code via eventtimelabel input. The arbitrary code runs both on the event page and in the admin panel. In my-calendar-event-manager.php, line 1873, the variable $eventTime is not sanitized...

2.1AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/03/28 5:46 p.m.4 views

USN-3610-1 icu vulnerability

It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service...

6.5CVSS7AI score0.02479EPSS
SaveExploits0References2
NVD
NVD
added 2018/03/27 9:29 a.m.27 views

CVE-2017-12310

A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive information in the unencrypted headers of an HTTP method request. The attacker could use this information to conduct additional reconnaissance attac...

7.5CVSS7.4AI score0.0091EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/03/27 9:00 a.m.14 views

CVE-2017-12310

A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive information in the unencrypted headers of an HTTP method request. The attacker could use this information to conduct additional reconnaissance attac...

6.5AI score0.0091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/27 9:00 a.m.31 views

CVE-2017-12310

A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive information in the unencrypted headers of an HTTP method request. The attacker could use this information to conduct additional reconnaissance attac...

7.4AI score0.0091EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/27 9:00 a.m.50 views

CVE-2017-12310

CVE-2017-12310 concerns Cisco Spark Hybrid Calendar Service, where the auto-discovery phase processes unencrypted HTTP requests. The vulnerability allows an unauthenticated, remote attacker to view unencrypted HTTP header information, enabling reconnaissance that could lead to disclosure of sensi...

7.5CVSS7.3AI score0.0091EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2018/03/20 12:00 a.m.5 views

Atlassian Jira Mail.ru Calendar plugin cross-site scripting vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all kinds of issues and defects in the workplace.Mail.ru Calendar plugin is one of the calendar plugins. A cross-site scripting vulnerability exists in Atlassian Jira...

5.4CVSS6.3AI score0.00713EPSS
SaveExploits0References1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2018/03/20 12:00 a.m.531 views

Visual Calendar, 3.1.5, SQL Injection

Visual Calendar by Joomcalendars.com, versions 3.1.5 and previous, SQL Injection resolution: update to 3.1.6 update notice: http://www.joomlacalendars.com/updates/visual-calendar3.1.6...

9.8CVSS1.9AI score0.02652EPSS
SaveExploits5References3Affected Software1
OSV
OSV
added 2018/03/16 1:29 p.m.5 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS5.8AI score0.00713EPSS
SaveExploits0References2
NVD
NVD
added 2018/03/16 1:29 p.m.23 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS5.3AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/16 1:29 p.m.18 views

Information disclosure

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

3.5CVSS6AI score0.00713EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/03/16 1:00 p.m.49 views

CVE-2016-10716

The CVE refers to a cross-site scripting (XSS) vulnerability in the Mail.ru Calendar plugin for Atlassian Jira, affecting versions before 2.5.0.61. The XSS is triggered via the Name field in a Create Calendar action and is linked to the MailRuCalendar.jspa#period/month URI. Several connected sour...

5.4CVSS5.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/16 1:00 p.m.28 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.3AI score0.00713EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:00 a.m.15 views

Solaris 10 (sparc) : 142785-17

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

6.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:00 a.m.15 views

Solaris 10 (x86) : 142786-17

Oracle Communications Calendar Server 7u5-17.22x86: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

6.9AI score
SaveExploits0References1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2018/03/07 12:00 a.m.567 views

Simple Calendar,3.1.9,SQL Injection

Simple Calendar by Fabrizio Albonico, versions 3.1.9 and previous, SQL Injection...

9.8CVSS4.2AI score0.02652EPSS
SaveExploits5References3Affected Software1
Rows per page
Query Builder