1339 matches found
CVE-2018-18348: Undefined Security Weakness
Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
CVE-2018-19556
zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
CVE-2018-19556
zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
Design/Logic Flaw
DISPUTED zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
CVE-2018-19556
CVE-2018-19556 affects Z-BlogPHP 1.5, specifically the endpoint zb_system/admin/index.php?act=UploadMng. The vulnerability description states that file preview handling in this endpoint mishandles previews, which could lead to content spoofing. The reports note that the software maintainer disput...
CVE-2018-19556
zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
CVE-2018-19556: Improper Input Validation
zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
PT-2018-15001 · Z Blogphp · Z-Blogphp
Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.5 Description: The issue in Z-BlogPHP relates to the mishandling of file preview in the zb system/admin/index.php?act=UploadMng endpoint, potentially leading to content spoofing. However, it's noted that the software...
Z-BlogPHP Content Spoofing Vulnerability
Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A security vulnerability exists in the zbsystem/admin/index.php?act=UploadMng URL in Z-BlogPHP version 1.5, which stems from the program not handling file previews correctly. An attacker can exploit the...
[ASA-201810-12] chromium: multiple issues
Arch Linux Security Advisory ASA-201810-12 ========================================== Severity: Critical Date : 2018-10-17 CVE-ID : CVE-2018-5179 CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471...
Authentication flaw
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
CVE-2018-17938
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
CVE-2018-17938
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
CVE-2018-17938
CVE-2018-17938 affects Zimbra Collaboration Server prior to 8.8.10 GA, where a loginErrorCode value can cause text content spoofing. The vulnerability is tied to the login error handling logic, enabling spoofed content in responses. The affected component is Zimbra Collaboration (server) before t...
CVE-2018-17938
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
CVE-2018-17938
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
PT-2018-14286
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.10 GA Description The issue allows text content spoofing via a loginErrorCode value. Recommendations For versions prior to 8.8.10 GA, update to version 8.8.10 GA or later to resolve the issue...
CVE-2018-17938: Insufficient Verification of Data Authenticity
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...
