699 matches found
Design/Logic Flaw
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection...
CVE-2019-15724
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection...
CVE-2019-15724
Removed by vendor...
CVE-2019-10396
Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...
Cross site scripting
Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...
PT-2019-11790 · Jenkins · Jenkins Dashboard View Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dashboard View Plugin versions 2.11 and earlier Description: The issue is related to a cross-site scripting vulnerability. It occurs because build descriptions are not properly escaped, allowing attackers who can change build...
CVE-2019-2129
In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...
CVE-2019-0335
Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console, versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the...
Firefly III Cross-Site Scripting Vulnerability (CNVD-2019-30450)
Firefly III is a free, open source, self-hosted personal finance manager. A stored cross-site scripting vulnerability exists in Firefly III 4.7.17.3. The vulnerability stems from a lack of filtering of user-supplied data in the transaction description field. An attacker can exploit this...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
Design/Logic Flaw
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
PT-2019-13358 · Yoast · Yoast Seo Plugin
Name of the Vulnerable Software and Affected Versions: Yoast SEO plugin versions prior to 11.6-RC5 Description: The issue concerns the improper restriction of unfiltered HTML in term descriptions, which could lead to potential security risks. Recommendations: For versions prior to 11.6-RC5, updat...
jenkins-plugin-blueocean: XSS vulnerability via user description in Blue Ocean (SECURITY-1204)
An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java,...
CVE-2019-1003013
An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java,...
PT-2019-11311 · Jenkins · Jenkins Blue Ocean Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Blue Ocean Plugins versions 1.10.1 and earlier Description: A cross-site scripting issue exists that allows attackers with permission to edit a user's description in Jenkins to have Blue Ocean render arbitrary HTML when using it as th...
CloudBees Jenkins JUnit Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the U.S. CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . JUnit Plugin is used in one of the Java...
Design/Logic Flaw
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via Epic change descriptions...
CVE-2018-17976
CVE-2018-17976 affects GitLab Community Edition 11.x (before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2). The vulnerability enables information exposure through Epic change descriptions in the Epic feature. Affected versions expose partial to high-privacy data (as per the CVE and rela...