FreePBX Contactmanager Cross-Site Scripting Vulnerability

FreePBX formerly known as Asterisk Management Portal is the FreePBX project's set of tools for configuring Asterisk IP telephony system through a GUI web-based graphical interface. contactmanager is one of the contact management components used in it. A cross-site scripting vulnerability exists i...

SonarSource SonarQube Cross-Site Scripting Vulnerability

SonarSource SonarQube is an open source code quality management system from SonarSource Switzerland. A cross-site scripting vulnerability exists in project links in SonarSource SonarQube versions prior to 7.8. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36913)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...

CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

Lute-Tab Buffer Overflow Vulnerability

Lute-Tab is a utility program for editing sound scores. A buffer overflow vulnerability exists in Lute-Tab. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations bein...

Ping Identity Agentless Integration Kit Cross-Site Scripting Vulnerability

Ping Identity Agentless Integration Kit is an agentless authentication development kit from Ping Identity. A cross-site scripting vulnerability exists in Ping Identity Agentless Integration Kit versions prior to 1.5. The vulnerability stems from the lack of proper validation of client-side data b...

WordPress wp-all-import plugin cross-site scripting vulnerability (CNVD-2019-28650)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A cross-site scripting vulnerability exists in WordPress wp-all-import...

WordPress wp-ultimate-csv-importer plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site scripting vulnerability...

WordPress mq-woocommerce-products-price-bulk-edit plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mq-woocommerce-products-price-bulk-edit is a product price editing plugin for e-commerce used in it. A cross-site scripting...

AdPlug Buffer Overflow Vulnerability (CNVD-2019-32337)

AdPlug is an AdLib sound player library written in C++. A buffer overflow vulnerability exists in the 'CdtmLoader::load' function of the dtm.cpp file in AdPlug version 2.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating dat...

invenio-previewer cross-site scripting vulnerability

invenio-previewer is an Invenio module for previewing files. A cross-site scripting vulnerability exists in versions prior to invenio-previewer 1.0.0a12. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability ...

D-Link 6600-AP and DWL-3600AP Buffer Overflow Vulnerability

The D-Link 6600-AP and the DWL-3600AP are both wireless access point devices from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link 6600-AP and DWL-3600AP. The vulnerability originates when a network system or product performs an operation on memory without properl...

GNU Debugger (GDB) Buffer Overflow Vulnerability

GNU gdb is a GNU Project debugger from the GNU Project. It supports debugging C, C++, Pascal, and FORTRAN programming languages. A buffer overflow vulnerability exists in the main module in GNU gdb. The vulnerability stems from a networked system or product that performs operations in memory...

mpg321 buffer overflow vulnerability

mpg321 is a command line mp3 player. A buffer overflow vulnerability exists in mpg321. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

OFFIS.de DCMTK Buffer Overflow Vulnerability

OFFIS.de DCMTK is a toolkit that implements the DICOM standard to inspect, build and convert DICOM image files, send and receive images over a network connection. A buffer overflow vulnerability exists in DcmRLEDecoder::decompress in OFFIS.de DCMTK 3.6.3 and earlier versions. The vulnerability...

MiniCMS mc-admin/page-edit.php file cross-site scripting vulnerability

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/page-edit.php file in MiniCMS version 1.10. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2019-21430)

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post-edit.php file in MiniCMS version 1.10, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

Synology Calendar Cross-Site Scripting Vulnerability (CNVD-2019-20976)

Synology Calendar is a file protection program from Synology Inc. of Taiwan, China that runs on Synology NAS Network Storage Server devices. A cross-site scripting vulnerability exists in Event Editor in Synology Calendar versions prior to 2.3.0-0615. The vulnerability stems from a lack of proper...

CVE-2019-10989

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-1099...

Sony Bravia TV Photo Sharing Plus Buffer Overflow Vulnerability

Sony Bravia TV is a smart TV from Sony Japan.Photo Sharing Plus is one of the photo sharing components. A buffer overflow vulnerability exists in the Photo Sharing Plus component in Sony Bravia TV versions 8.587 and earlier. The vulnerability originates when a networked system or product performs...