CVE-2020-15053

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

CVE-2020-15053: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

CB ThreatHunter: Now Available on the CB Predictive Security Cloud (PSC)

Today Carbon Black is announcing the general availability of CB ThreatHunter, our newest offering on the CB Predictive Security Cloud PSC, which delivers powerful threat hunting and incident response IR capabilities on the same platform. The release of CB ThreatHunter marks the fourth service...

Unspecified vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in Joomla! that stems from the program's inadequate checking of tagged search fields. No details of the vulnerabilit...

CVE-2018-17857: Incorrect Authorization

An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can lead to an access level violation...

[20181003] - Core - Access level Violation in com_tags

Inadequate checks on the tags search fields can lead to an access level violation...

CVE-2017-7952

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

Sql injection

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

CVE-2017-7952

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

CVE-2017-7952

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

CVE-2017-7952

INFOR EAM V11.0 Build 201410 contains an SQL injection in search/filter functionality related to the filtervalue parameter. Multiple connected sources (e.g., CVE-2017-7952 records, exploitation writeups, CNVD/PRION entries) describe a vulnerability where user-controlled filtervalue can be crafted...

CVE-2017-7952: Improper Neutralization of Special Elements used in an SQL Command

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS)

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 whereCriteria variable in a software channels search; 2 endyear, 3 starthour, 4 endampm, 5 endday, 6 endhour, 7 endminute, 8...

Winamp < 5.64 Multiple Vulnerabilities

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.64 and is, therefore, reportedly affected by the following vulnerabilities : - A buffer overflow exists in the 'mllocal.dll' when passed GUI search fields. - A buffe...

CVE-2012-4556: Improper Input Validation

The token processing system pki-tps in Red Hat Certificate System RHCS before 8.1.3 allows remote attackers to cause a denial of service Apache httpd web server child process restart via certain unspecified empty search fields in a user certificate search query...

pki-tps: Connection reset when performing empty certificate search in TPS

The token processing system pki-tps in Red Hat Certificate System RHCS before 8.1.3 allows remote attackers to cause a denial of service Apache httpd web server child process restart via certain unspecified empty search fields in a user certificate search query...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the evtvariablename parameter in an evts.xml action to kw.dll, 2 unspecified search fields, or 3 unspecified...

CVE-2005-4547: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields...