CVE-2018-17938

CVE-2018-17938 affects Zimbra Collaboration Server prior to 8.8.10 GA, where a loginErrorCode value can cause text content spoofing. The vulnerability is tied to the login error handling logic, enabling spoofed content in responses. The affected component is Zimbra Collaboration (server) before t...

PT-2018-14286

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.10 GA Description The issue allows text content spoofing via a loginErrorCode value. Recommendations For versions prior to 8.8.10 GA, update to version 8.8.10 GA or later to resolve the issue...

CVE-2018-17938: Insufficient Verification of Data Authenticity

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

Null pointer dereference

CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer...