1394 matches found
Code injection
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...
CVE-2020-24941
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...
CVE-2020-24941
The CVE-2020-24941 vulnerability affects Laravel framework prior to 6.18.35 and 7.x prior to 7.24.0, where the $guarded property is mishandled in certain requests with JSON column nesting expressions. The issue’s root cause is a mishandling of guarded on models when nested JSON expressions are in...
PT-2020-15864 · Taylor Otwell · Laravel
Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.18.35 Laravel versions 7.x prior to 7.24.0 Description: An issue was discovered in Laravel where the $guarded property is mishandled in certain situations involving requests with JSON column nesting expressions...
The vulnerability of the components column.title and cellLinkTooltip in the Grafana data visualization web tool allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the column.title and cellLinkTooltip components of the Grafana data visualization web tool is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...
grafana: XSS via column.title or cellLinkTooltip
A flaw was found in grafana. A XSS is possible in table-panel via column.title or cellLinkTooltip...
Cross-site Scripting (XSS)
jenkins is vulnerable to cross-site scripting XSS. The vulnerability exists as it improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers...
CVE-2020-2219
Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability...
Cross site scripting
Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability...
CVE-2020-2219
CVE-2020-2219 concerns the Jenkins Link Column Plugin (versions 1.0 and earlier). The issue is a stored cross-site scripting (XSS) vulnerability where links created by users with View/Configure permission are not filtered, allowing the javascript: scheme to be executed. The affected component is ...
CVE-2020-2219
Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability...
PT-2020-15435 · Jenkins · Jenkins Link Column Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Link Column Plugin versions 1.0 and earlier Description: The issue concerns a stored cross-site scripting vulnerability. It allows users with View/Configure permission to create links that can execute JavaScript code due to the lack o...
grafana: XSS via column.title or cellLinkTooltip
A flaw was found in grafana. A XSS is possible in table-panel via column.title or cellLinkTooltip...
CVE-2020-12245
A flaw was found in grafana. A XSS is possible in table-panel via column.title or cellLinkTooltip...
jenkins: improperly processes HTML content of list leads to XSS
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers...
PHP-Fusion 9.03.60 PHP Object Injection / SQL Injection
Exploit Title: PHP-Fusion v9.03.60, PHP Object Injection to SQL injection pre-auth Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 import sys import requests impo...
UBUNTU-CVE-2018-18624
Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
CVE-2019-15083
Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workstation local administrator. Using the installed program names of the computer as a vector, the local administrator can execute code on the Manage Engine ServiceDesk administrator...
Android Security Bulletin—May 2020Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...