949 matches found
CVE-2019-15560
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
CVE-2019-15560
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
Sql injection
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
CVE-2019-15560
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
CVE-2019-15560
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
CVE-2019-15560
CVE-2019-15560 affects OpenSource Table’s Reviews Module, prior to 2019-06-14. The root cause is an SQL injection in database/index.js, enabling potentially unauthenticated network-based exploitation with high to critical impact (CVSS v2: 7.5; CVSS v3: 9.8). References indicate a patch discussion...
PT-2019-14276
Name of the Vulnerable Software and Affected Versions OpenSource Table versions prior to 2019-06-14 Description The issue allows SQL injection in the database/index.js file of the Reviews Module. Recommendations For versions prior to 2019-06-14, update the Reviews Module to a version released aft...
CVE-2019-15560: Improper Neutralization of Special Elements used in an SQL Command
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...
kde-workspace security and bug fix update
kdelibs 6:4.14.8-10 - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz1710362 6:4.14.8-9 - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz1710362 6:4.14.8-8 - Disable JAR repack script to avoid multilib...
RHEL 7 : kde-workspace (RHSA-2019:2141)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2141 advisory. The K Desktop Environment KDE is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Deskt...
Mail.ru: Открытые сорцы
gitlab repository with opensource projects was available from external network on geekbrains.ru subdomain. While no sensitive information was leaked, decision was made to limit the access to eliminate possible risks in future...
CVE-2019-7437
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
CVE-2019-7437
CVE-2019-7437 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2 and is a reflected Cross-Site Scripting (XSS) vulnerability triggered via the Search field. The connected sources consistently describe the issue as a reflected XSS flaw in the search input, with no additional details o...
PT-2019-18609
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...
PT-2019-18608
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...
PT-2019-18610
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...
CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...
CVE-2019-7437: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
Debian DSA-4374-1 : qtbase-opensource-src - security update
Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI. C Tenable Network Security, Inc. The...
[SECURITY] [DSA 4374-1] qtbase-opensource-src security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4374-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 28, 2019 https://www.debian.org/security/faq -...