307 matches found
Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-0248ad925e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Horde CSV import arbitrary PHP code execution
The HordeData module version 2.1.4 and before present in Horde Groupware version 5.2.22 allows authenticated users to inject arbitrary PHP code thus achieving RCE on the server hosting the web application. Module Options msf use exploit/multi/http/horde/csvrce msf undefinedcsvrce show actions...
Jama Connect Cross-Site Scripting Vulnerability
Jama Connect is an application lifecycle management product that can be deployed in the cloud or installed on Mac and Windows devices. A cross-site scripting vulnerability exists in Jama Connect 8.44.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Select...
VulnCheck KEV: CVE-2019-0193
The optional Apache Solr module DataImportHandler contains a code injection vulnerability...
The first Zbrunk dashboard and other news
The long New Year holiday season in Russia was not in vain. I had time to work on Zbrunk. As you can see, I made my first dashboard and added other features. No more timestamps in code I added functions to get Unix timestamps from lines in human-readable time format, e.g. "2019.12.10 13:00:00"...
The vulnerability of the DataImportHandler module of the Apache Solr search server allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the DataImportHandler module of the Apache Solr search server lies in its error handling for the ādataConfigā request. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
[SECURITY] Fedora 30 Update: phpMyAdmin-4.9.2-1.fc30
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
[SECURITY] Fedora 31 Update: phpMyAdmin-4.9.2-1.fc31
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
CVE-2019-9745
CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service Recognition Update Client Service via an insecure communication channel Named Pipe. The data JSON sent via this channel is used to import data from...
CVE-2019-15821
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...
Design/Logic Flaw
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...
CVE-2019-15821
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...
CVE-2019-15327
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...
WordPress import-users-from-csv-with-meta plugin path traversal vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A path traversal vulnerability exists in versions of the...
CVE-2019-15127
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...
CVE-2019-15127
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...
Cross site scripting
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...
CVE-2019-15127
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...
CVE-2019-15127
CVE-2019-15127 affects REDCap prior to 9.3.0. The issue is an XSS vulnerability on the Data Import Tool page, exploitable by a CSV data import file and affecting non-administrator accounts. The description in public records does not specify the underlying root cause or CVE exploit vectors beyond ...
