Libsixel Null Pointer Dereference Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A null pointer dereference vulnerability exists in the 'sixelhelpersetadditionalmessag' function status.c file in libsixel version 1.8.2, which can be exploited by an attacke...

SQL Injection Vulnerability in Xinhuo Collaboration Office v1.8.2

Xinhuo Co-operation Office System is an open source and cross-platform office system. A SQL injection vulnerability exists in Xinhao Collaboration Office v1.8.2. An attacker can exploit the vulnerability to obtain sensitive information in the database...

Delta Sql 1.8.2 - id SQL Injection

Delta Sql 1.8.2 - id SQL Injection Exploit Title: Delta Sql 1.8.2 - 'id' SQL Injection Dork: N/A Date: 2018-10-25 Exploit Author: Ihsan Sencan Vendor Homepage: http://deltasql.sourceforge.net/ Software Link: https://sourceforge.net/projects/deltasql/files/latest/download Software Link:...

OURPHP website builder system has SQL injection vulnerability

OURPHP is a PHP+MySQL based development of W3C standard building system. OURPHPCMS V1.8.2, V1.8.3 version of the system are SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Github Electron Protocol Handler Command Injection Vulnerability

GitHub Electron is a GitHub application development framework . The framework supports the use of JavaScript, HTML and CSS to write cross-platform desktop applications . Protocol Handler is one of the protocol handler . A command injection vulnerability exists in Protocol Handler in Github Electr...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-32707)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Tasks Alerts...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-32706)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Tasks Title'...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-32705)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Tasks...

Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-32710)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-scripting vulnerability vulnerability exists in the 'Tasks...

Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-32709)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Phonecalls...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11059)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11061)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-11060)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

CVE-2017-9622

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

Telaxus EPESI Cross-Site Scripting Vulnerability

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . Telaxus EPESI 1.8.2 and earlier versions of the module...

DEBIAN-CVE-2015-4456

ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a...

[SECURITY][DLA 241-1] wireshark security update

Package : wireshark Version : 1.8.2-5wheezy16deb6u1 CVE ID : CVE-2015-3811 The following vulnerabilities were discovered in the Squeeze LTSs prior Wireshark version: CVE-2015-3811 The WCP dissector could crash while decompressing data...

Improper validation of certificates when using self-signed certificates 1.8.2

Platform: Desktop-clients Versions: 1.8.2, Date: 6/8/2015 Risk level: Medium CVSS v2 Base Score: 6.1 AV:N/AC:H/Au:N/C:C/I:P/A:N CWE: Improper Validation of Certificate with Host Mismatch CWE-297...