302 matches found
CVE-2021-26723
Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS...
PT-2021-17114
Name of the Vulnerable Software and Affected Versions Jenzabar versions 9.2.x through 9.2.2 Description The issue allows for XSS via the "/ics?tool=search&query=" endpoint. Recommendations For Jenzabar versions 9.2.x through 9.2.2, as a temporary workaround, consider restricting access to the...
CVE-2021-26723: Improper Neutralization of Input During Web Page Generation
Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS...
Moodle cross-site scripting vulnerabilities
Moodle is a learning platform designed to provide educators, administrators, and learners with a powerful, secure, and integrated system for creating personalized learning environments. A reflected cross-site scripting vulnerability exists in Moodle versions prior to 3.10.1. The vulnerability ste...
Gitlab Denial of Service Vulnerability (CNVD-2020-70850)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A denial of service vulnerability exists in all versions ...
Information Disclosure
elasticsearch is vulnerable to information disclosure. The vulnerability exists when Document or Field Level Security is used, as search queries do not properly preserve security permissions when executing certain complex queries...
Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue PoC /?s=%3Cimg%20src%20onerror=alert/XSS/%3E...
dorkScanner - A Typical Search Engine Dork Scanner Scrapes Search Engines With Dorks That You Provide In Order To Find Vulnerable URLs
A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. Introduction Dorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various search engines fo...
PT-2020-13019
Name of the Vulnerable Software and Affected Versions Catch Breadcrumb plugin versions prior to 1.5.4 Description The issue allows Reflected XSS via the s parameter, which is a search query. This affects not only the Catch Breadcrumb plugin but also 16 themes by the same author if the plugin is...
CVE-2019-20210
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query...
Cross site scripting
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query...
CVE-2019-20210
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query...
CVE-2019-20210
The CVE-2019-20210 entry affects WordPress themes CTHthemes CityBook < 2.3.4, TownHub < 1.0.6, and EasyBook
CVE-2019-20210: Improper Neutralization of Input During Web Page Generation
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query...
PT-2020-10372
Name of the Vulnerable Software and Affected Versions CTHthemes CityBook versions prior to 2.3.4 CTHthemes TownHub versions prior to 1.0.6 CTHthemes EasyBook versions prior to 1.2.2 Description The issue allows for Reflected XSS via a search query, which can be exploited to inject malicious scrip...
Exploit for Path Traversal in Ivanti Connect_Secure
pulsexploit Automated script for Pulse Secure SSL VPN exploit...
CVE-2010-2222
The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...
Null pointer dereference
The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...
PT-2019-6536
Name of the Vulnerable Software and Affected Versions Red Hat Directory Server version 8 389 Directory Server affected versions not specified Description The issue allows attackers to cause a denial of service via a crafted search query, resulting in a NULL pointer dereference. This is due to a...
CVE-2010-2222: NULL Pointer Dereference
The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...