4242 matches found
CVE-2017-1000177
CVE-2017-1000177 is a reservation/duplicate of CVE-2017-11097. The connected records describe the underlying issue as: SWFTools 0.9.2 processes a crafted SWF file in swfc, causing a NULL pointer dereference in dict_lookup() in lib/q.c. This is the same vulnerability tracked under CVE-2017-11097; ...
CVE-2017-9767
Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...
CVE-2017-9767
Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...
PT-2017-19173
Name of the Vulnerable Software and Affected Versions Quali CloudShell versions prior to 8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via several parameters,...
CVE-2017-9767: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...
Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross Site Scripting Vulnerability
Exploit for windows platform in category web applications Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767...
Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting
Quali CloudShell 7.1.0.6508 Patch 6 - Persistent Cross-Site Scripting Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767...
Quali CloudShell 7.1.0.6508 (Patch 6) Cross Site Scripting
Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...
Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting
Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...
CVE-2011-4936
CVE-2011-4936 is rejected/not used; refer to CVE-2012-0822.
CVE-2011-4933
CVE-2011-4933 is rejected; use CVE-2012-0819 instead.
CVE-2011-4935
CVE-2011-4935 is a reservation duplicate of CVE-2012-0821. Connected records show the concrete issue: Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors (unspecified vulnerability). This entry is linked to CVE-2012-0821, which document...
CVE-2012-2323
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2214. Reason: This candidate is a reservation duplicate of CVE-2012-2214. Notes: All CVE users should reference CVE-2012-2214 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3552. Reason: This candidate is a reservation duplicate of CVE-2010-3552. Notes: All CVE users should reference CVE-2010-3552 instead of this candidate. All references and descriptions in this candidate have been removed to...
Hard Rock, Loews Hotels Among Sabre Corp Hospitality Breach Victims
For the second time in the past year the Hard Rock Hotels and Casinos franchise is encouraging guests to keep tabs on their bank account statements for suspicious activity. The hotel, resort, and casino chain on Thursday said it was alerted on June 6 that its systems were impacted by a security...
doorcountycottages.com XSS vulnerability
Open Bug Bounty ID: OBB-254338 Description| Value ---|--- Affected Website:| doorcountycottages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-9021
CVE-2017-9021 is a rejected candidate; reference CVE-2017-5937 instead.
PT-2023-10646 · Canonical · Resteasy
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10220. Reason: This candidate is a reservation duplicate of CVE-2016-10220. Notes: All CVE users should reference CVE-2016-10220 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2017-8784
CVE-2017-8784 is a reservation duplicate of CVE-2017-7263. The connected documents confirm Potrace 1.14 has a heap-based buffer over-read in bm_readbody_bmp when processing BMP images, enabling denial of service. Fedora advisories indicate a later Potrace release (1.15) addressing this family of ...