8759 matches found
CVE-2017-3632
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE Calendar. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of thi...
CVE-2017-3632
CVE-2017-3632 affects Solaris SPP (SunOS) CDE Calendar, with affected versions 10 and 11. The vulnerability is exploitable over TCP with no authentication, enabling an attacker to take over Solaris (high impact on confidentiality, integrity, availability). The connected documents corroborate the ...
CVE-2017-3632
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE Calendar. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of thi...
Event Registration Pro Calendar Component SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the id parameter in Joomla! Event Registration Pro Calendar, which can be exploited by attackers to access or modify database data...
Joomla! Component Event Registration Pro Calendar 4.1.3 - SQL Injection
Joomla! Component Event Registration Pro Calendar 4.1.3 - SQL Injection Exploit Title: Joomla! Component Event Registration Pro Calendar v4.1.3 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://joomlashowroom.com/ Software:...
Information Disclosure
Moodle is vulnerable to information disclosure. A malicious user can pass a web-service request to the application to get sensitive information about calendar events...
Sensitive Information Disclosure
Moodle is vulnerable to sensitive information disclosure. calendar/externallib.php ignores checking whether an activity is hidden or not and discloses the calendar-event data related to hidden activities...
Unauthorized Calendar Modification
Moodle is vulnerable to unauthorized calendar modification. The application does not check for capabilities for editing the calendar, allowing a malicious user to delete course level calendar subscription created by teacher users...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the CDE Calendar subcomponent of the Solaris component of Oracle Sun Systems Products Suite, versions 10 and 11. An...
Birthday calendar (Upcoming) - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Birthday calendar Upcoming published at the 'play' market has multiple vulnerabilities...
CVE-2017-2224
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2224
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2224
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2224
The CVE-2017-2224 vulnerability affects the WordPress plugin Event Calendar WD (Web-Dorado). It is a cross-site scripting (XSS) flaw in versions prior to 1.0.94 (notably
ownCloud Information Disclosure Vulnerability (CNVD-2017-22086)
ownCloud is a free and open source personal cloud storage solution from the German company ownCloud, which provides file management, music storage, calendaring and other features. ownCloud server is a server version. A security vulnerability exists in versions of ownCloud Server prior to 10.0.2. ...
contact.hamptonroads.com XSS vulnerability
Open Bug Bounty ID: OBB-260005 Description| Value ---|--- Affected Website:| contact.hamptonroads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Authorization Bypass
Moodle is vulnerable to authorization bypass. The calendar/managesubscriptions.php does not enforce the correct permissions on users, allowing a malicious user with access to a student account to edit the calendar subscriptions...
Mixmax: Public calendar link can be invisible
Hello, I was working on the calendar settings. Where I saw, there is a public calendar link creator box. Usually people put their username in that box. But I was tired to do something. I know the calendar link can be unlisted as public. But the things I found, I can make my calendar link public a...