18953 matches found
CVE-2018-8912
Cross-site scripting XSS vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via the commitmsg parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...
CVE-2018-8911
Synology Note Station’s Attachment Preview is affected by CVE-2018-8911. The vulnerability is an XSS in Attachment Preview prior to version 2.5.1-0844 that allows remote authenticated users to inject arbitrary web script or HTML via a malicious attachment. Public sources (CNVD/NVD entries) descri...
CVE-2018-8911
Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...
Moodle 2.x / 3.x Multiple Vulnerabilities (May 2017) - Linux
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
Moodle 2.x / 3.x Multiple Vulnerabilities (May 2017) - Windows
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
Command injection
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig that calls the vulnerable function eval...
CVE-2018-10642
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig that calls the vulnerable function eval...
CVE-2018-10642
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig that calls the vulnerable function eval...
CVE-2018-10642
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig that calls the vulnerable function eval...
Command injection
Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...
CVE-2013-4201
Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...
CVE-2013-4201
Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...
CVE-2013-4201
CVE-2013-4201 affects Red Hat Katello. Connected CNVD-2018-10937 indicates Katello vulnerability allowing remote authenticated users to invoke the system remove_deletion CLI command via vectors tied to remove system permissions. The NVD entry describes remote authentication with system removal ca...
PT-2018-4098 · Red Hat · Katello
Name of the Vulnerable Software and Affected Versions: Katello affected versions not specified Description: The issue allows remote authenticated users to execute the system remove deletion CLI command due to weaknesses in remove system permissions. Recommendations: At the moment, there is no...
CVE-2018-1277
Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS...
CVE-2018-10572
OpenEMR
Security feature bypass
IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...