732 matches found
CVE-2018-12607
CVE-2018-12607 affects GitLab CE/EE prior to 10.7.6, 10.8.x prior to 10.8.5, and 11.x prior to 11.0.1. It describes a persistent XSS in the charts feature due to lack of output encoding. Upgrading to GitLab version 11.0.1 or newer (upstream fix) is the documented remediation; other sources also n...
CVE-2018-12607
Removed by vendor...
[ASA-201807-1] gitlab: multiple issues
Arch Linux Security Advisory ASA-201807-1 ========================================= Severity: Medium Date : 2018-07-04 CVE-ID : CVE-2018-3740 CVE-2018-12606 CVE-2018-12607 Package : gitlab Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-726 Summary ======= The packag...
CVE-2013-10070
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/phpchartsexec.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:50:45+00:00| seen|...
investing.com XSS vulnerability
Open Bug Bounty ID: OBB-556902 Description| Value ---|--- Affected Website:| investing.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...
WakaTime: UI Redressing on Embedded Charts
Hi Team, Wanna report you that Embedded Charts part is missing X-Frame-Options header hence vulnerable to clickjacking vulnerability. PoC: Just login to your account and open below html page you can see how simply victim can be clickjacked. Click You've been clickjacked! iframe id="parentFrame"...
nauticalcharts.noaa.gov XSS vulnerability
Vulnerable URL: https://www.nauticalcharts.noaa.gov/nsd/searchbychart.php?chart=1"...
nauticalcharts.noaa.gov XSS vulnerability
Vulnerable URL: https://www.nauticalcharts.noaa.gov/nsd/coastpilotw.php?book=1/-///'/"//--...
gamesonly.at XSS vulnerability
Vulnerable URL: https://www.gamesonly.at/index.asp?suchstring=add=id=13=Charts=1/-///'/"//--...
Faraday v2.5 - Collaborative Penetration Test and Vulnerability Management Platform
Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...
Real Time Performance Monitoring: netdata
Real Time Performance Monitoring Netdata is a daemon that collects data in realtime per second and presents a web site to view and analyze them. The presentation is also real-time and full of interactive charts that precisely render all collected values. netdata is the fastest way to visualize...
Wordpress tera-charts plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up a personal blog site . tera-charts is one of the plug-ins used to drag and drop charts in the Excel file . A cross-site scripting...
CVE-2016-1000151
Reflected XSS in wordpress plugin tera-charts v1.0...
CVE-2016-1000151
Reflected XSS in wordpress plugin tera-charts v1.0...
Cross site scripting
Reflected XSS in wordpress plugin tera-charts v1.0...
CVE-2016-1000151
CVE-2016-1000151: Reflected XSS in WordPress tera-charts plugin v1.0. The vulnerability is described across multiple sources as an unauthenticated XSS via input handling (e.g., treemap.php?fn=...), allowing script/HTML injection. Exploitation is reported as unauthenticated in the sources; CVSS me...
CVE-2016-1000151
Reflected XSS in wordpress plugin tera-charts v1.0...
DEBIAN-CVE-2016-5733
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...
CVE-2016-5733
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...