277 matches found
PYSEC-2017-150
Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
PYSEC-2017-65
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2017-12074
CVE-2017-12074 affects Synology DNS Server prior to 2.2.1-3042. The vulnerability is a directory traversal flaw in SYNO.DNSServer.Zone.MasterZoneConf that allows remote authenticated attackers to write arbitrary files via the domain_name parameter. Affected product: Synology DNS Server (versions ...
Cross site scripting
Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...
CVE-2016-7509
Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...
CVE-2016-7509
Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...
CVE-2016-7507
Cross-Site Request Forgery CSRF vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application...
CVE-2015-9104
Cross-site scripting XSS vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title...
Sql injection
SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function...
CVE-2016-7802
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2173
CVE-2017-2173 corresponds to a stored cross-site scripting (CWE-79) vulnerability in the IPA’s Empirical Project Monitor - eXtended. The linked CNVD/JVN records describe a cross-site scripting flaw that can allow arbitrary script execution in a user’s browser. The JVN entries indicate the vulnera...
CVE-2016-4877
Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2148
Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2114
CVE-2017-2114 affects Cybozu Office 10.0.0–10.5.0. The vulnerability is a cross-site scripting flaw in the design setting screen (CWE-79) that allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Impact: arbitrary scripts may execute in the logged-...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function...
CVE-2016-4870
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function...
CVE-2016-4893
SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...