6616 matches found
CVE-2019-18656
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...
Design/Logic Flaw
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...
CVE-2019-18656
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...
The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the failure to take measures to neutralize special elements. This vulnerability allows a violator to unauthorizedly intercept and modify software update packets.
The vulnerability of the ZingBox Inspector network traffic handler exists because special elements are not properly neutralized. Exploiting this vulnerability allows a malicious actor to intercept and modify software update packets remotely and without authorization...
The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code.
The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2019-5086
Name of the Vulnerable Software and Affected Versions Loofah gem for Ruby versions through 2.3.0 Description The issue is related to the Loofah gem for Ruby, where unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. This could potentially allow a remote...
ALPINE-CVE-2019-18218
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...
DEBIAN-CVE-2019-18218
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...
UBUNTU-CVE-2019-18218
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...
Cross-Site Scripting (XSS)
wordpress is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser by storing the malicious code in STYLE elements...
CVE-2019-17672
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
DEBIAN-CVE-2019-17672
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
CVE-2019-17672
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
CVE-2019-17672
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
UBUNTU-CVE-2019-17672
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
Cross site scripting
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
CVE-2019-17672: Improper Neutralization of Input During Web Page Generation
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements...
Adobe Acrobat Reader DC text field value remote code execution vulnerability redux
Summary A specific JavaScript code embedded in a PDF file can lead to a heap corruption when opening a PDF document in Adobe Acrobat Reader DC, version 2019.012.20035. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim...
Cisco IOS ISDN Interface Denial of Service Vulnerability
According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the ISDN functions which could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information element...
CVE-2018-5102
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...