Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

Impact A cross-site scripting vulnerability has been identified in Goobi viewer core when using nicknames. An attacker could create a user account and enter malicious scripts into their profile's nickname, resulting in the execution in the user's browser when displaying the nickname on certain...

GHSA-2R9R-8FCG-M38G Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

Impact A cross-site scripting vulnerability has been identified in Goobi viewer core when using nicknames. An attacker could create a user account and enter malicious scripts into their profile's nickname, resulting in the execution in the user's browser when displaying the nickname on certain...

CVE-2023-29016 Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts int...

CVE-2023-29016 Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts int...

PT-2023-22089 · Unknown · Goobi Viewer

Name of the Vulnerable Software and Affected Versions: Goobi viewer versions prior to 23.03 Description: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core when using...

SUSE CVE-2018-7051

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings...

PT-2022-27999 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue concerns improper authorization in the usememos/memos GitHub repository. This repository is for an open-source, self-hosted memo hub that includes knowledge management and...

ALPINE-CVE-2018-7051

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings...

openSUSE Security Update : konversation (openSUSE-2017-1306)

This update for konversation fixes the following issues : Security issue fixed : - CVE-2017-15923: Fixed a crash in parsing IRC color formatting codes boo1068097. Bug fixes : - Update to version 1.7.4 : - Fixed a bug causing the size of a custom chat text view font set via the configuration dialo...

Kingsoft Wordsmith Android app has multiple overstepping vulnerabilities

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. Kingsoft Wordmaster Android app has multiple overstepping vulnerabilities. Attackers can use this vulnerability to traverse other people's information and modify their avatars and nicknames...

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35762/info S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully exploiting this issue allow...

Impressions Games Lords of the Realm III Nickname Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server. The problem is in the handling of...

S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29723/info S.T.A.L.K.E.R. game servers are prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully exploiting this issue...

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

DEBIAN-CVE-2010-0420

libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...

USN-902-1: Pidgin vulnerabilities

Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. CVE-2010-0277 Sadrul Habib Chowdhury discovered that...

pidgin: Finch XMPP MUC Crash

libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service source: https://www.securityfocus.com/bid/35762/info S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully...

S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/29723/info S.T.A.L.K.E.R. game servers are prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully exploiting this issue allows remote attackers to crash...

S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service

S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service // source: https://www.securityfocus.com/bid/29723/info S.T.A.L.K.E.R. game servers are prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully...