Arbitrary File Download Vulnerability in Cruise Cloud Light Forum System

Cruise Cloud Light Forum System is an open source web application based on JAVA + MYSQL architecture, including forums, Q&A modules. Patrol Cloud Light Forum system has an arbitrary file download vulnerability, attackers can use this vulnerability to download arbitrary files to obtain sensitive...

CVE-2019-20141: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

CVE-2019-19698

CVE-2019-19698 affects the libwav library (marc-q libwav) up to version 2017-04-20. The root cause is a NULL pointer dereference in wav_content_read() located in libwav.c, which can lead to a denial of service. Multiple sources (NVD, Red Hat, CVE databases, CNVD, PRION, CVELIST) corroborate the s...

CVE-2019-19698: NULL Pointer Dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

PT-2019-15919

Name of the Vulnerable Software and Affected Versions marc-q libwav versions prior to 2017-04-20 Description The issue is related to a NULL pointer dereference in the wav content read function at libwav.c. Recommendations For versions prior to 2017-04-20, consider restricting access to the wav...

CVE-2014-1238

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

Cross site scripting

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

CVE-2014-1238

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

CVE-2014-1238

This CVE (CVE-2014-1238) is a Cross-Site Scripting (XSS) in Gael/Q-Pulse 0.6 and earlier, affecting the UI path ui/common/managedlistdialog.aspx. The vulnerability arises from unvalidated input being inserted into a JavaScript variable named $RootTree, exploitable via a crafted URL (e.g., LookupL...

CVE-2014-1238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

PT-2019-7075

Name of the Vulnerable Software and Affected Versions Gael Q-Pulse versions 0.6 and earlier Description A cross-site scripting XSS issue exists. Recommendations For Gael Q-Pulse versions 0.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this iss...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

Race condition

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

CVE-2019-13555

CVE-2019-13555 affects Mitsubishi Electric MELSEC-Q Series (Q03/04/06/13/26UDVCPU, Q04/06/13/26UDPVCPU, Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU) and MELSEC-L Series (L02/06/26CPU, L26CPU-BT, L02/06/26CPU-P, L26CPU-PBT, L02/06/26CPU-CM, L26CPU-BT-CM). A remote attacker can cause the FTP servic...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

q-wigan-athletic.talent-boxoffice.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015574 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-13555: Uncontrolled Resource Consumption

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

PT-2019-13417

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU versions with serial number 21081 and prior Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU versions with serial number 21081 and prior Mitsubishi Electric MELSEC-Q Series...