Sourcecodester SourceCodester Grocery Store Sales And Inventory System SQL注入漏洞

Sourcecodester SourceCodester Grocery Store Sales And Inventory System is a grocery store sales and inventory management system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Grocery Store Sales And Inventory System version 1.0, which can be exploited by an attack...

reddoxx maildepot Cross-Site Scripting Vulnerability

reddoxx maildepot reddoxx maildepot is an e-mail archiving software from German reddoxx. The software stores all e-mails automatically and permanently in an archive independent of the mail server. A cross-site scripting vulnerability exists in MailDepot version 2033 2.3.3022, which stems from a...

GoCD: XSS In https://docs.gocd.org/current/

Searches on docs.gocd.org were subject to a client-side XSS issue...

CVE-2020-17024

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...

CVE-2020-17024

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...

Privilege escalation

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability

...

KB4586785: Windows 10 Version 1803 November 2020 Security Update

The Microsoft 4586785 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...

PT-2020-4864 · Microsoft · Windows Client Side Rendering Print Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Client Side Rendering Print Provider affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Client Side Rendering Print Provider component of the Windows operating system...

XooNIps Cross-Site Scripting Vulnerability (CNVD-2020-63192)

XooNIps is a content management system for the field of neuroscience by the XooNIps team in Japan. A cross-site scripting vulnerability exists in XooNIps version 3.49 and prior versions, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can explo...

KB4586787: Windows 10 November 2020 Security Update

The Microsoft 4586787 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...

QNAP Systems TS-870 Cross-Site Scripting Vulnerability

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in the File Name of Music Station in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of...

QNAP Systems TS-870 Cross-Site Scripting Vulnerability

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in PhotoStation Filenames in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of client...

CVE-2020-28250

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

CVE-2020-28250

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

Authentication flaw

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

httpd: limited cross-site scripting in mod_proxy error page

A cross-site scripting vulnerability was found in Apache httpd, affecting the modproxy error page. Under certain circumstances, a crafted link could inject content into the HTML displayed in the error page, potentially leading to client-side exploitation...

httpd: mod_rewrite potential open redirect

A vulnerability was discovered in Apache httpd, in modrewrite. Certain self-referential modrewrite rules could be fooled by encoded newlines, causing them to redirect to an unexpected location. An attacker could abuse this flaw in a phishing attack or as part of a client-side attack on browsers...

WordPress Greenmart theme cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Greenmart theme version 2.4.2, which originates in th...