1107 matches found
crud-file-server node module cross-site scripting vulnerability
The crud-file-server node module is a file server that supports create, read, update and delete functions. A cross-site scripting vulnerability exists in crud-file-server node module versions prior to 0.8.0, which stems from the program's lack of file name validation. A remote attacker can exploi...
CVE-2017-7765
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only...
CVE-2017-7765
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only...
Debian DSA-4222-1 : gnupg2 - security update
Marcus Brinkmann discovered that GnuPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email. Details can be found in the upstream advisory at...
Debian DSA-4223-1 : gnupg1 - security update
Marcus Brinkmann discovered that GnuPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email. Details can be found in the upstream advisory at...
[SECURITY] [DSA 4224-1] gnupg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4224-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4224-1] gnupg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4224-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4223-1] gnupg1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4223-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4222-1] gnupg2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4222-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2018 https://www.debian.org/security/faq -...
CVE-2018-3726
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3726
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3716
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
Cross site scripting
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3726
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3726
The vulnerability relates to the crud-file-server Node.js module prior to version 0.8.0. Affected component/file: directory index handling in crud-file-server where filenames are not properly validated, leading to a stored Cross-Site Scripting (XSS) vulnerability. Root cause: insufficient sanitiz...
CVE-2018-3716: Improper Neutralization of Input During Web Page Generation
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
gnupg -- unsanitized output (CVE-2018-12020)
GnuPG reports: GnuPG did not sanitize input file names, which may then be output to the terminal. This could allow terminal control sequences or fake status messages to be injected into the output...
Debian: Security Advisory (DSA-4222-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Joomla! Core cross-site scripting vulnerability (CNVD-2018-15238)
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A cross-site scripting vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program failing to properly filter fi...