Apache Atlas Stored Cross-Site Scripting Vulnerability

Apache Atlas is a scalable set of core infrastructure governance services that enable organizations to efficiently meet compliance requirements in Hadoop and allow integration with the entire enterprise data ecosystem. A stored cross-site scripting vulnerability exists in the search function in...

CVE-2016-11003

The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation...

CVE-2019-16321

ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATHINFO...

Cross-Site Scripting in selectize-plugin-a11y

Versions of selectize-plugin-a11y prior to 1.1.0 are vulnerable to Cross-Site Scripting. The accessibility.liveRegion.speak function does not sanitize the msg variable before rendering it as HTML. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript in ...

CVE-2017-18555

The booking-sms plugin before 1.1.0 for WordPress has XSS...

CVE-2017-18532

The realty plugin before 1.1.0 for WordPress has multiple XSS issues...

Ubiquiti Networks EdgeSwitch X Command Injection Vulnerability

The Ubiquiti Networks EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A command injection vulnerability exists in Ubiquiti Networks EdgeSwitch X version 1.1.0 and earlier. The vulnerability arises from a network system or product not properly filtering specific elements...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Watson Assistant on IBM Cloud Private

Summary There are multiple vulnerabilities in the IBM® Runtime Environment Java™ Technology Edition, Version 8, used by IBM Watson™ Assistant for IBM Cloud Private. The issues were disclosed as part of the IBM Java SDK updates for October 2018. Vulnerability Details CVEID: CVE-2018-3139...

CVE-2019-5425

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

Dell EMC IsilonSD Management Server Cross-Site Scripting Vulnerability (CNVD-2019-12914)

Dell EMC IsilonSD Management Server is a management server for EMC IsilonSD storage from Dell USA. A cross-site scripting vulnerability exists in Dell EMC IsilonSD Management Server version 1.1.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker...

PT-2022-16562 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: A Null Pointer Dereference issue exists via the xtra box write function in /box code base.c, causing a Denial of Service. Recommendations: For GPAC version 1.1.0, apply the fix from commit 71f9871 to resolve th...

PT-2022-18249 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is related to a use-after-free vulnerability in the gf node get attribute by tag function. This vulnerability can lead to memory corruption and potentially allow a...

Security Bulletin: Cross-site scripting vulnerability in CacheMonitor for WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1767)

Summary There is a potential cross-site scripting vulnerability in the Admin Console for WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-1767 DESCRIPTION: IBM WebSphere Application Server CacheMonitor is vulnerable to cross-site scripting. This vulnerability allows users to...

CVE-2018-10369

A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...

Microsoft ASP.NET Core Security Feature Bypass Vulnerability (Jul 2018)

This host is missing an important security update according to Microsoft advisory CVE-2018-8171. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Security Bulletin: Multiple security vulnerabilities has been identified in Websphere Application Server shipped with Jazz for Service Management (CVE-2017-1121, CVE-2016-5983, CVE-2016-8919)

Summary Websphere Application Server WAS Full profile is shipped as a component of Jazz for Service Management JazzSM and WAS has been affected by multiple security vulnerabilities. Vulnerability Details CVEID: CVE-2017-1121 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-sit...

OpenSSL Denial of Service Vulnerability (CNVD-2018-12153)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

WordPress MULTIDOTS WooCommerce Category Banner Management Plugin Design Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.MULTIDOTS WooCommerce Category Banner Management plugin is used in one of the web design plugin. A security...

DEBIAN-CVE-2016-10542

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier...

Flippy DamnFacts Viral Fun Facts Sharing Script 1.1.0 CSRF / XSS

Exploit Title: Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Persistent cross site scripting / Cross site request forgery Date: 2018-05-20 Dork: N/A Exploit Author: borna nematzadeh L0RD Vendor Homepage: https://www.codegrape.com/item/flippy-damnfacts-viral-fun-facts-sharing-script/36...