1719 matches found
How To Be An Informed Skeptic About Security Predictions
It doesn’t take a wily prediction to see that the cycles of tech procurement and planning are increasingly compressed. In enterprise IT, the two largest forces at play are business changes and technology changes. These two major forces are somewhat independent; a lot of tech change happened durin...
CVE-2019-10764
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve whic...
CVE-2019-10764
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve whic...
CVE-2019-10764
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve whic...
CMS Made Simple <= 2.2.11 Cross-Site Scripting (XSS) Vulnerability
CMS Made Simple is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
October 15, 2019—KB4519979 (OS Build 14393.3300)
None None...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-13525)
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple 2.2.11, which can be exploited to conduct cross-site scripting attacks via the Admin Module Manager Search Term...
CVE-2019-17226
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
CVE-2019-17226
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
Cross site scripting
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
CVE-2019-17226
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
CVE-2019-17226
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
CVE-2019-17226: Improper Neutralization of Input During Web Page Generation
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
PT-2019-15019
Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 2.2.11 Description The issue allows for XSS via the Site Admin Module Manager Search Term field. Recommendations For version 2.2.11, update to a newer version that contains a fix for this issue...
CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2019-34786)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2019-34784)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins and LTS Information Disclosure Vulnerability (CNVD-2019-34787)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
Cisco IOS XE HTTP Server Denial of Service Vulnerability
Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the HTTP server code of Cisco IOS XE. The vulnerability stems from a logic error in the logging mechanism. An attacker could exploit this vulnerability to cause the...
PT-2019-11797 · Cloudbees +1 · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.196 and earlier Jenkins LTS versions 2.176.3 and earlier Description: The issue results from the failure to escape the SCM tag name on the tooltip for SCM tag actions, leading to a stored XSS vulnerability. This can be...