5599 matches found
CVE-2017-18561: Improper Neutralization of Input During Web Page Generation
The embed-comment-images plugin before 0.6 for WordPress has XSS...
PT-2019-8495
Name of the Vulnerable Software and Affected Versions WordPress embed-comment-images plugin versions prior to 0.6 Description The issue allows for cross-site scripting XSS attacks. Recommendations For versions prior to 0.6, update the embed-comment-images plugin to version 0.6 or later to resolve...
RHEL 7 : fence-agents (RHSA-2019:2037)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2037 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...
samlr XML nodes comment attack
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
GHSA-QPXP-5J56-GG3X samlr XML nodes comment attack
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
samlr XML nodes comment attack
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
CVE-2018-20857
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
CVE-2018-20857
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
Code injection
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with email protected followed by . and then the attacker's domain name...
CVE-2018-20857
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
CVE-2018-20857
CVE-2018-20857 concerns Zendesk Samlr prior to 2.6.2, which is vulnerable to an XML nodes comment attack in a name_id node (example: [email protected] followed by ). The attack sequence could append the attacker’s domain name. Public references from Red Hat, GitHub, OSV, and Veracode describe this...
CVE-2018-20857
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
CVE-2018-20857: Improper Input Validation
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...
PT-2019-10284
Name of the Vulnerable Software and Affected Versions: Zendesk Samlr versions prior to 2.6.2 Description: The issue allows an XML nodes comment attack, where an attacker can manipulate the name id node by including a comment followed by the attacker's domain name, potentially allowing for malicio...
CVE-2019-2253: Out-of-bounds Read
Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607,...
PT-2019-16333
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, S...
CVE-2019-13950
index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...
Cross site scripting
index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...