8759 matches found
openSUSE Security Update : MozillaThunderbird (openSUSE-2018-101)
This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed : - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...
Security update for MozillaThunderbird (important)
This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...
Security update for MozillaThunderbird (important)
This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...
OPENSUSE-SU-2018:0257-1 Security update for MozillaThunderbird
This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...
student.utm.utoronto.ca XSS vulnerability
Open Bug Bounty ID: OBB-541557 Description| Value ---|--- Affected Website:| student.utm.utoronto.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Moodle cross-site scripting vulnerability (CNVD-2018-02376)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in version 3.x of Moodle. A remote attacke...
lanseschools.org XSS vulnerability
Open Bug Bounty ID: OBB-539400 Description| Value ---|--- Affected Website:| lanseschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
greatscottboston.com XSS vulnerability
Open Bug Bounty ID: OBB-539389 Description| Value ---|--- Affected Website:| greatscottboston.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Code injection
In Moodle 3.x, there is XSS via a calendar event name...
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name...
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name...
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name...
UBUNTU-CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name...
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name...
CVE-2018-1045
CVE-2018-1045 affects Moodle 3.x: XSS via the calendar event name, caused by inadequate input handling. Exploitation is a network-accessible issue that typically requires user interaction; impact is limited to confidentiality and integrity (low). The provided documents confirm Fedora updates fix ...
WordPress Booking calendar plugin <=2.1.7 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found by d4wner in WordPress Booking calendar plugin versions =2.1.7. Solution Update the WordPress Booking calendar plugin to the latest available version at least 2.1.8...
WordPress Booking calendar plugin <=2.1.7 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by d4wner in WordPress Booking calendar plugin versions =2.1.7. Solution Update the WordPress Booking calendar plugin to the latest available version at least 2.1.8...
WordPress booking-calendar plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site request forgery vulnerability...
WordPress booking-calendar plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...
WordPress booking-calendar plugin cross-site scripting vulnerability (CNVD-2018-01252)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...