1979 matches found
FreeBSD : glpi -- stored XSS (d222241d-91cc-11ea-82b8-4c72b94353b5)
MITRE Corporation reports : inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors...
Update rollup: Fix printing problems in Windows 7 and Windows Server 2008 R2
Update rollup: Fix printing problems in Windows 7 and Windows Server 2008 R2 Summary of issue fixes This update rollup improves the performance and stability of printing in Windows 7 and Windows Server 2008 R2. It also fixes various printing issues in Picture Manager, Remote Desktop Services RDP,...
Art-Picture-Gallery <= 1.2.9 - Unauthenticated Arbitrary File Upload
Edit WPScanTeam: March 26th, 2020 - Report Received & Vendor Contacted March 30th, 2020 - Escalated to WP Plugins team as no response from vendor March 31st, 2020 - WP Plugins team investigating & Plugin closed April 2nd, 2020 - Disclosure The PoC will be displayed once the issue has been remedia...
WordPress Art-Picture-Gallery plugin <= 1.2.9 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Random Robbie in WordPress Art-Picture-Gallery plugin versions = 1.2.9. Solution Plugin closed. Deactivate and delete...
CVE-2020-9775
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
CVE-2020-9775
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
Code injection
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
CVE-2020-9775
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
CVE-2020-9775
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
CVE-2020-9775
CVE-2020-9775 affects Safari on iOS/iPadOS; root cause: incorrect handling of tabs displaying picture-in-picture video, leading to potentially exposing a user’s private browsing activity to Screen Time. Apple fixed this in iOS 13.4 and iPadOS 13.4 via improved state handling; remediation is to up...
CVE-2020-9775: Improper Initialization
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...
Stripo Inc: Unrestricted File Upload on https://my.stripo.email and https://stripo.email
Hi Stripo Inc, I found 2 Unrestricted File Upload Vulnerabilities on your website. First Vulnerability: Step to Reproduce 1. Create an account in "https://my.stripo.email" 2. Simply Download a php shell from internet and open with text editor. ex: r57 shell 3. Then save it as JPEG file. 4. Go bac...
CVE-2018-17058
An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...
CVE-2020-8811
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
CVE-2020-8811
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
Design/Logic Flaw
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
CVE-2020-8811
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
CVE-2020-8811: Missing Authorization
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
Uber: Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE
After booking a shared ride, an attacker is able to access the profile picture of a co-rider. It is possible during the trip to view the co-rider's picture...