5955 matches found
CVE-2017-8876: Improper Neutralization of Input During Web Page Generation
Symphony 2 2.6.11 has XSS in the metanavigationgroup parameter to content/content.blueprintssections.php...
PT-2017-18598
Name of the Vulnerable Software and Affected Versions Symphony 2 version 2.6.11 Description The issue concerns a problem with the metanavigation group parameter in the content/content.blueprintssections.php file, which can lead to XSS. Recommendations For Symphony 2 version 2.6.11, avoid using th...
Weblate: Missing filteration of meta characters in full name field on registration page https://demo.weblate.org/accounts/register
Hi there Vulnerability Title: Meta characters are not filtered into full name on registration page Description You haven't filtered control meta characters such as %00 etc in full name field on registration page which allows an attacker to impersonate or hide their real identity within the...
[SECURITY] Fedora 25 Update: kernel-4.10.12-200.fc25
The kernel meta package...
Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerability in Twitter Cards Meta
We recently found that the Twitter Cards Meta contains a cross-site request forgery CSRF/cross-site scripting XSS vulnerability on the plugin’s setting pages,/wp-admin/admin.php?page=twitter-cards-meta. The CSRF potion of the vulnerability was due to a lack of a nonce on the page and a lack of a...
CVE-2017-8098
e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker...
CVE-2017-8098: Cross-Site Request Forgery (CSRF)
e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker...
PT-2017-18113
Name of the Vulnerable Software and Affected Versions e107 version 2.1.4 Description The issue allows a malicious web page to use forged requests to make e107 download and install a plug-in provided by the attacker, due to cross-site request forgery in plugin-installing, meta-changing, and...
harald-ebner.de XSS vulnerability
Open Bug Bounty ID: OBB-226735 Description| Value ---|--- Affected Website:| harald-ebner.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-3024
Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to an integer overflow that can occur wh...
[SECURITY] Fedora 25 Update: kernel-4.10.9-200.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.10.9-100.fc24
The kernel meta package...
CVE-2017-3052
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...
CVE-2017-3052
Technical details for CVE-2017-3052 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2017-3052
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...
F5 Networks BIG-IP : Mailx vulnerabilities (K16945)
CVE-2014-7844 The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell meta characters in an email address. CVE-2004-2771 A flaw was found in the way mailx handled the parsing of email addresses...
e107 CMS 2.1.4 - Cross-Site Request Forgery
...
[SECURITY] Fedora 25 Update: kernel-4.10.8-200.fc25
The kernel meta package...