4757 matches found
CVE-2020-25267
An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...
Cross site scripting
An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...
CVE-2020-25267
An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...
Crash Reporter Utility for Citrix Virtual Apps and Desktops
About This Release This is an early technical preview release v1.0.0.2 of the Crash Reporter utility. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now...
Citrix preSCAN Tool
About This Release This is an early technical preview release v1.0.0.2 of the preSCAN tool. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now available ...
CVE-2020-26167
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...
CVE-2020-26167
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...
Design/Logic Flaw
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...
CVE-2020-26167
Summary: CVE-2020-26167 affects FUEL CMS up to version 11.4.12. The vulnerability arises in the page preview feature, enabling an anonymous user to take complete ownership of any account, including administrator ones. This is described consistently across multiple sources (NVD entry and Red Hat a...
CVE-2020-26167
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...
Joomla Publisher 3.0.19 Cross Site Scripting
Exploit Title: Joomla Publisher V 3.0.19 Stored XSS Date: 03.11.2020 Author: Vincent666 ibn Winnie Software Link: https://publisher.ijoomla.com/demo Tested on: Windows 10 Web Browser: Mozilla Firefox Blog : https://pentest.vincent.blogspot.com/ PoC:...
GHSA-QVP5-MM7V-4F36 Cross-site Scripting in Strapi
Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature...
October 29, 2020—KB4580364 (OS Builds 19041.610 and 19042.610) Preview
None None...
Strapi Cross-Site Scripting Vulnerability
Strapi is an open source headless content management system CMS. A cross-site scripting vulnerability exists in Strapi versions prior to 3.2.5, which stems from the fact that Strapi has stored XSS in the preview feature of the WYSIWYG editor, which can be exploited by an attacker to obtain user...
CVE-2020-27666
Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature...
CVE-2020-27666
Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature...
CVE-2020-16947
A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the targeted user. If the targeted user is logged on with...
GitLab Cross-Site Scripting Vulnerability (CNVD-2021-26076)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in the SVG file preview in GitLab, which can be exploit...