165 matches found
CVE-2020-10578
CVE-2020-10578 affects QCMS v3.0.1 with an arbitrary file read vulnerability in the file path system/controller/backend/template.php. Multiple connected sources (NVD, Red Hat, CNVD, CNVD CNVD-2020-19603, etc.) corroborate that an attacker can read files, leading to information disclosure. The des...
The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to an unacceptable grid size during QCMS transformations. This allows attackers to disclose protected information.
The vulnerability of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is related to an unacceptable grid size during QCMS transformations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information obtained by reading beyond the buffer limit...
Stored Cross-Site Scripting Vulnerability in QCMS Website Management System Before and After
QCMS website management system is a PHP lightweight system developed through MVC architecture. A stored cross-site scripting vulnerability exists before and after the QCMS website management system. An attacker can insert malicious js code into a page to obtain user cookies and other information,...
Stored XSS Vulnerability in QCMS Website Management System
QCMS is a free, open source, easy to use, responsive website management system. A stored XSS vulnerability exists in the QCMS website management system, which can be exploited to obtain administrator account information...
SQL Injection Vulnerability in QCMS Backend
QCMS website management system is a PHP lightweight system developed through MVC architecture. There is a SQL injection vulnerability in the backend of QCMS, which can be exploited by attackers to obtain sensitive database information...
Denial Of Service (DoS)
Thunderbird, Firefox ESR and Firefox are vulnerable to denial of service attacks. A remote unauthenticated attacker could cause out-of-bounds memory read error during QCMS color profile transformations via QCMS Color Profile Transformation component...
Command Execution Vulnerability in QCMS
QCMS website management system is a PHP lightweight system developed through MVC architecture. QCMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...
CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
CVE-2018-12366
CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...
CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
qcms/fuzz: Use-of-uninitialized-value in clamp_float
Detailed report: https://oss-fuzz.com/testcase?key=5702366075027456 Project: qcms Fuzzer: libFuzzerqcmsfuzz Fuzz target binary: fuzz Job Type: libfuzzermsanqcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clampfloat qcmstransformmodulematrix...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10279)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/user.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS cross-site scripting vulnerability (CNVD-2019-10284)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/category.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10275)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/slideshow.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10278)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/down.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
Mozilla Thunderbird Security Advisories (MFSA2018-19, MFSA2018-19) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
CVE-2018-14974
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS...