PT-2023-10804 · Zenoss · Zenoss Dashboard

Name of the Vulnerable Software and Affected Versions: Zenoss Dashboard versions up to 1.3.4 Description: A vulnerability was found in an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the HTMLString argument leads to...

Zenoss 跨站脚本漏洞

Zenoss is the United States Zenoss company's set of open source enterprise-class IT management and monitoring software. The software provides event management, network service monitoring, host resource monitoring and network device availability monitoring and other functions. A cross-site scripti...

smashing 跨站脚本漏洞

smashing is a software application. A framework based on Sinatra. A cross-site scripting vulnerability exists in Smashing 1.3.4, which stems from the ability to craft a URL for a widget and use it to execute JavaScript on a victim's computer...

HyperKitty 信息泄露漏洞

An information disclosure vulnerability exists in HyperKitty version 1.3.4 and prior versions that stems from when importing archives of private mailing lists that are publicly visible during the import...

openSUSE: Security Advisory for mumble (openSUSE-SU-2021:0300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : mumble (openSUSE-2021-300)

This update for mumble fixes the following issues : mumble was updated to 1.3.4 : - Fix use of outdated non-existent notification icon names - Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 - Server: Fix Exit status for actions like...

Security update for mumble (moderate)

openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the following...

WordPress YITH WooCommerce Recover Abandoned Cart plugin <=1.3.3 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Recover Abandoned Cart plugin versions =1.3.3. Solution Update the WordPress YITH WooCommerce Recover Abandoned Cart plugin to the latest available version at least 1.3....

Sandbox Breakout / Arbitrary Code Execution in safer-eval

Versions of safer-eval prior to 1.3.4 are vulnerable to Sandbox Escape leading to Remote Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. For example, evaluating he string console.constructor.constructor'return process'.env prints process.e...

Security update for srt (moderate)

openSUSE Security Update: Security update for srt Announcement ID: openSUSE-SU-2019:2128-1 Rating: moderate References: 1148844 Cross-References: CVE-2019-15784 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: srt was updated t...

OPENSUSE-SU-2019:2083-1 Security update for srt

srt was updated to version 1.3.4. Security issues fixed: CVE-2019-15784: avoid a potential array overflow. boo1148844 New binary: srt-tunnel srt-multiplexer binary is now a testing application and thus is dropped from our package...

UBUNTU-CVE-2019-15784

Secure Reliable Transport SRT through 1.3.4 has a CSndUList array overflow if there are many SRT connections...

CVE-2018-7841

A SQL Injection CWE-89 vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered...

CVE-2018-7841

A SQL Injection CWE-89 vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered...

CVE-2018-7841

A SQL Injection CWE-89 vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered...

CVE-2018-7841

A SQL Injection CWE-89 vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

PHP Scripts Mall Image Sharing Script Directory Traversal Vulnerability

PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. A directory traversal vulnerability exists in PHP Scripts Mall Image Sharing Script 1.3.4. This vulnerability can be exploited to achieve...

PHP Scripts Mall Image Sharing Script HTML Injection Vulnerability

PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. PHP Scripts Mall Image Sharing Script 1.3.4 suffers from an HTML injection vulnerability. The vulnerability can be exploited to achieve HTML...

GHSA-F94M-MQHR-MC29 Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...