LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-02523)

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A cross-site scripting vulnerability exists in LimeSurvey versions prior to 2.72.4,...

LimeSurvey < 2.72.4 XSS Vulnerability

LimeSurvey is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-18358

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later aka Resume later feature to enter an email address, which is mishandled in the admin panel...

PT-2019-8298

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 2.72.4 Description The issue concerns a Stored XSS that can be triggered by utilizing the Continue Later feature to input an email address. This email address is then mishandled within the admin panel, leading to...

CVE-2017-18358: Improper Neutralization of Input During Web Page Generation

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later aka Resume later feature to enter an email address, which is mishandled in the admin panel...

PT-2018-13818

Name of the Vulnerable Software and Affected Versions Lizard formerly LZ5 version 2.0 Description A denial of service issue was found, related to the use of an invalid memory address in the LZ5 compress continue function in lz5 compress.c, specifically with LZ5 compress fastSmall and MEM read32...

CVE-2018-7636: Improper Neutralization of Input During Web Page Generation

The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScript or HTML via specially crafted URLs...

Palo Alto PAN-OS cross-site scripting vulnerability (CNVD-2018-15748)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the continue page of Palo Alto Networks PAN-OS 8.0.10 and earlier versions. The vulnerability can be exploited to inject arbitrary...

Cross Site Scripting in PAN-OS

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS URL filtering “continue page” Ref PAN-OS 90835, CVE-2018-7636. PAN-OS software does not properly validate specific request parameters. Successful exploitation of this issue may allow an attacker to inject arbitrary JavaScript or HTML i...

PT-2018-18175

Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.0.0 through 8.0.10 Description A Cross-Site Scripting XSS issue exists in the PAN-OS URL filtering “continue page” due to improper validation of specific request parameters. This allows an attacker to inject arbitrary...

Microsoft Windows: Continue experiences on this device

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincontinueexperiencedevice.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Continue experiences on this device Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

LimeSurvey 2.72.3 - Persistent XSS to Code Execution

See RIPS Scan Report Unauthenticated Persistent Cross-Site Scripting LimeSurvey 2.72.3 is prone to a persistent cross-site scripting vulnerability which is exploitable through the unauthenticated perspective. When submitting a public survey, the Continue Later feature allows users to save their...

Artifex Software MuJS Denial of Service Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A denial of service vulnerability exists in previous versions of Artifex Software MuJS...

PT-2016-7727

Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions before 5008105780c0b0182ea6eda83ad5598f225be3ee Description The issue allows context-dependent attackers to conduct denial of service attacks by using the malformed labeled break/continue in JavaScript...

CVE-2016-9294: NULL Pointer Dereference

Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service application crash" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting t...

PT-2014-9004 · Alt +6 · Alt Linux +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.18.1 ALT Linux affected versions not specified Description: The issue is related to the rock continue function in fs/isofs/rock.c, which does not properly restrict the number of Rock Ridge continuation entries...

UBUNTU-CVE-2013-4255

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a 1 PREEMPT, 2 SUSPEND, 3 CONTINUE, 4 WANTVACATE, or 5 KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of...

PT-2011-1134

Name of the Vulnerable Software and Affected Versions Openswan versions 2.3.0 through 2.6.36 Description The issue is related to a use-after-free vulnerability in the cryptographic helper handler functionality. This vulnerability allows remote authenticated users to cause a denial of service,...

ROS-2-4003

2.4003 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. For inquiries regarding the purchase of new installation kits including a...

ROS-2-3428

2.3428 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...