16123 matches found
CVE-2019-15724
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection...
CVE-2019-15724
GitLab CVE-2019-15724 affects GitLab Community and Enterprise Edition 11.10–12.2.1, where label descriptions are vulnerable to HTML injection. The issue is a factual HTML-injection vulnerability in label descriptions; exploitation details are not provided in the available documents. Remediation: ...
CVE-2019-15724
Removed by vendor...
Node.js third-party modules: [snekserve] Stored XSS via filenames HTML formatted
I would like to report a stored XSS issue in the snekserve module. It allows to inject HTML/JS code inside the directory listing : Module module name: snekserve version: 1.0.0 npm page: https://www.npmjs.com/package/snekserve Module Description Assuming you would like to serve a static site, sing...
Cross site scripting
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
Cross site scripting
A reflected cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files...
CVE-2019-16178
LimeSurvey prior to 3.17.14 is affected by a stored XSS vulnerability that allows authenticated users with appropriate permissions to inject arbitrary script or HTML via the titles of admin box buttons on the home page. Root cause is input in button titles not properly sanitized before rendering....
CVE-2019-15944
CVE-2019-15944 affects Counter-Strike: Global Offensive, specifically community game servers, with the issue described as displaying unsafe HTML in a disconnection message prior to 2019-08-29. Supported documents confirm the target is CS:GO game servers and the vulnerability arises from unsafe HT...
iswgoa3z.sportsretriever.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-955962 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting iswgoa3z.sportsretriever.co...
CVE-2019-13975
eGain Chat 15.0.3 allows HTML Injection...
CVE-2019-13975
eGain Chat 15.0.3 allows HTML Injection...
Design/Logic Flaw
eGain Chat 15.0.3 allows HTML Injection...
CVE-2019-13975
eGain Chat 15.0.3 allows HTML Injection...
CVE-2019-13975
CVE-2019-13975 : The supplied connected documents identify an HTML Injection vulnerability in eGain Chat 15.0.3 . The CVSS details indicate a network-accessible issue with low to moderate impact: base CVSS v3.0 score 6.1 (vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), with no availability...
CVE-2019-15814
Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...
GitLab HTML Injection Vulnerability (CNVD-2019-31316)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An HTML injection vulnerability exists in GitLab Enterpri...
Nextcloud: XSS in desktop client via invalid server address on login form
Team! I have found this vulnerability that in my time would be called "cross zone" but at the moment I don't know. The problem is found in the latest version of "nextcloud.exe" for your windows version. The problem occurs with the initial screen where you ask to connect to a website. Apparently...
FreeBSD : Gitlab -- Multiple Vulnerabilities (b68cc195-cae7-11e9-86e9-001b217b3468)
Gitlab reports : Kubernetes Integration Server-Side Request Forgery Server-Side Request Forgery in Jira Integration Improved Protection Against Credential Stuffing Attacks Markdown Clientside Resource Exhaustion Pipeline Status Disclosure Group Runner Authorization Issue CI Metrics Disclosure Use...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Kubernetes Integration Server-Side Request Forgery Server-Side Request Forgery in Jira Integration Improved Protection Against Credential Stuffing Attacks Markdown Clientside Resource Exhaustion Pipeline Status Disclosure Group Runner Authorization Issue CI Metrics Disclosure User...