4237 matches found
CVE-2020-21088
Cross Site Scripting XSS in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page"...
CVE-2020-21088: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page"...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
PT-2024-11133 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the iommu/vt-d component in the Linux kernel, where the first level page table used for IOVA translation only supports Read-Only and Read-Write permissions, but...
NetworkManager bug fix and enhancement update
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...
Microsoft Defender for Endpoint now supports Windows 10 on Arm devices
Today, we are excited to announce that Microsoft Defender for Endpoint support of Windows 10 on Arm devices is generally available. This expanded support is part of our continued efforts to extend Microsoft Defender for Endpoint capabilities across all the endpoints defenders need to secure. Arm...
Microsoft Exchange and Verkada Hacks: Isolate Your Apps and APIs from the Internet Cesspool
It's been an interesting start to March in terms of public security incidents. This month kicked off with multiple zero-day exploits being used to attack on-premises versions of Microsoft Exchange Server. And, as if that wasn't enough, that attack was quickly followed by the news that a hacktivis...
CVE-2020-8356: Cleartext Transmission of Sensitive Information
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMTP forwarders are written to an internal LXCO log file in clear text. Affected logs are captured in the First Failure Data Capture FFDC service log. The FFDC...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...
CVE-2020-35328: Improper Neutralization of Input During Web Page Generation
Courier Management System 1.0 - 'First Name' Stored XSS...
Courier Management System 跨站脚本漏洞
SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...