CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

CVE-2018-12994: Improper Control of Generation of Code

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen...

PT-2018-11523

Name of the Vulnerable Software and Affected Versions OneFileCMS versions prior to 2012-04-14 Description The issue allows attackers to execute arbitrary PHP code via a .php filename on the New File screen. Recommendations For versions prior to 2012-04-14, consider restricting access to the New...

CVE-2018-12995: Improper Control of Generation of Code

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

PT-2018-11524

Name of the Vulnerable Software and Affected Versions OneFileCMS versions prior to 2012-04-14 Description The issue allows attackers to execute arbitrary PHP code via a .php filename on the Upload screen. Recommendations For versions prior to 2012-04-14, consider restricting access to the Upload...

Microsoft Windows: Screen saver timeout

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintimoutscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Screen saver timeout users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Turn off toast notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintoastlockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off toast notifications on the lock screen users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Force specific screen saver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winforcescreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Force specific screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: Enable screen saver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Enable screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows 10: Configure Windows spotlight on lock screen

This policy setting lets you configure Windows spotlight on the lock screen. If you enable this policy setting, SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows 10: Cortana above lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincortanalockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Cortana above lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Cross site scripting

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-1000508

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

Cross site scripting

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-1000508: Improper Neutralization of Input During Web Page Generation

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

PT-2018-9406

Name of the Vulnerable Software and Affected Versions WP ULike versions 2.8.1 through 3.1 Description The issue allows unauthorized users to perform administrative actions due to a Cross Site Scripting XSS vulnerability in the Settings screen. This can be exploited when an admin visits the logs...

CVE-2018-0557: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...