397 matches found
CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
Zomato: XSS in "explore-keywords-dropdown" results.
It seems that people have exploited this vulnerability before on this website, however, it remains unpatched, so here I am reporting the vulnerability. A XSS vulnerability exists when a restaurant or dish is created with a malicious name. The title of the dish or restaurant is not properly filter...
CVE-2018-9244
Removed by vendor...
CVE-2018-9244
GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component leads to cross site scripting specifically, data-milestone-id in the milestone dropdown feature. This is fixed in 10.6.3, 10.5.7, and 10.4.7...
Popcorn Time 'Subtitles' Dropdown Remote Code Execution Vulnerability
Popcorn Time is an open source movie player that plays HD movies directly from cloud servers via seed files. A remote code execution vulnerability exists in Popcorn Time. An attacker can exploit the vulnerability to execute arbitrary code in an affected system environment, and a failed attack cou...
Cross-site Scripting (XSS)
Semantic-UI is vulnerable to cross-site scripting XSS attacks. When adding the data-text option as a dropdown item, arbitrary script can be executed when a user clicks on the dropdown item...
Harvest: Persistent XSS on ForecastApp
When adding a new Person, by inserting this in First or Last Name, I've got a persistent XSS: The key for this is that the person with the XSS string must appear in one or more dropdown menus. In other words, the Person must be available to be assigned to at least one project. I can also trigger...
CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
UBUNTU-CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
May 3, 2016, update for InfoPath 2013 (KB3114946)
None None...
May 3, 2016, update for InfoPath 2013 (KB3114818)
None None...
DropDown Block 3D - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application DropDown Block 3D published at the 'play' market has multiple vulnerabilities...
Zaption: XSS - Gallery Search Listing
HI. If you upload video having title with XSS payload. and search for the video, the dropdown listing will execute the payload. https://www.zaption.com/gallery/search?q=%3E%3Cimg I need not to upload the payload, I utilized already uploaded videos. You can also execute the payload by just start...
CVE-2014-9737
Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block...
Open redirect
Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block...
CVE-2014-9737
Open redirect in Drupal Language Switcher Dropdown module (7.x-1.x) prior to 7.x-1.4. The module does not validate the redirect URL in the block, allowing attackers to redirect users to arbitrary sites and facilitate phishing. Affected: Drupal 7.x-1.x versions before 7.x-1.4. Mitigation: upgrade ...
UBUNTU-CVE-2014-9258
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter...
