709 matches found
GHSA-27PX-QPMJ-QG38 Paste Script has improper group memberships permissions
Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...
GHSA-7F2C-VP52-GMFW OpenStack keystonemiddleware does not verify certificate
OpenStack keystonemiddleware formerly python-keystoneclient 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration paste.ini file regardless of the value, which allows remote attackers to conduct man-in-the-middle...
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
The s3token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration paste.ini file regardless of the value, which allows remote attackers to conduct...
April 25, 2022—KB5011831 (OS Builds 19042.1682, 19043.1682, and 19044.1682) Preview
None None...
Description of the security update for SharePoint Server 2019: April 12, 2022 (KB5002180)
None None...
RocketChat LiveChat 跨站脚本漏洞
RocketChat LiveChat is a small, lightweight application from RocketChat Inc. designed to provide B2C business-to-customer communication between agents and website visitors. A cross-site scripting vulnerability exists in RocketChat LiveChat versions prior to 1.9, which can be exploited by an...
CWA for Chrome: Unable to copy-paste cells from Published Excel App to Google sheets opened locally
When you copy multiple cell values from Excel App via ICA to Google Sheets accessed from Local PC the values fail to get pasted to Google Sheets...
vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c
A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...
Android Enterprise: Allow cross file copy and paste policy not working as expected after Citrix Endpoint Management upgraded to 22.2.0 (or later).
Customers who's restriction policy setting "Allow cross file copy and paste" is not working as expected after Citrix Endpoint Management CEM upgraded to 22.2.0 or later release...
CVE-2022-0392
A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s script...
Copy paste for some data works with Citrix Receiver 14.x but NOT with Citrix Workspace app.
Post upgrade from Citrix Receiver 14.x to Citrix Workspace app, copy and paste no longer works for some data from the published application to local workstation. Some types of data for example simple text do work as expected, but other data doesn't like, Copy tables data and paste it to Excel at...
Copy & Paste of files is not working through RDP proxy session
Textual data can be copied through RDP session but copying a file is not working, paste icon is greyed out In the downloaded rdp file, only clipboard redirection is enabled, drive redirection is disabled redirectclipboard:i:1 redirectdrives:i:0...
GHSA-2HFJ-CXW7-G45P Unsafe inline XSS in pasting DOM element into chat
Impact Inline scripts are executed when Javascript is parsed via a paste action. 1. Open https://watch.owncast.online/ 2. Copy and then paste into the chat field. 3. An alert should pop up. Patches ⋮ 13 │ // Content security policy ⋮ 14 │ csp := string ⋮ 15 │ "script-src 'self'...
CVE-2021-39183
Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...
Owncast 跨站脚本漏洞
Owncast is an open source, self-hosted, decentralized, single-user real-time video streaming and chat server. A cross-site scripting vulnerability exists in Owncast, which in affected versions executes inline script when parsing Javascript via a paste operation...
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...
GHSA-QH7X-J4V8-QW5W Clipboard-based XSS
Impact XSS against the user. Details jsuites is vulnerable to DOM based XSS if the user can be tricked into copying anything from a malicious and pasting it into the html editor. This is because a part of the clipboard content is directly written to innerHTML causing XSS. References The Curious...
CVE-2021-32202
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...
kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c
A use-after-free flaw was found in the Linux kernel console driver when using the copy-paste buffer. This flaw allows a local user to crash the system...