PT-2020-8631 · Jquery · Jquery

Name of the Vulnerable Software and Affected Versions: jQuery version 2.2.2 Description: The issue allows for cross-site scripting XSS attacks via a crafted onerror attribute of an IMG element. Recommendations: For jQuery version 2.2.2, consider disabling the use of the onerror attribute in IMG...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM eDiscovery Analyzer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by IBM eDiscovery Analyzer. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SD...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2018-1079)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1170

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough Versions 2.2 to 2.2.1+ affected...

CVE-2012-1170

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough...

Cross site scripting

Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting XSS - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3...

Django Cross-Site Scripting Vulnerability (CNVD-2019-16528)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A cross-site scripting vulnerability exists in Django versions 1.11 before 1.11.21, 2.1 before...

UBUNTU-CVE-2019-12308

An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provid...

PT-2019-11143 · Apache · Apache Uima Ducc

Name of the Vulnerable Software and Affected Versions: Apache UIMA DUCC versions 2.2.2 and earlier Description: The issue arises from insufficient filtering of user-supplied inputs in the javascript code of Apache UIMA DUCC, potentially leading to the unintended execution of user-supplied...

Loofah gem for Ruby cross-site scripting vulnerability

Loofah gem for Ruby is a Nokogiri based HTML/XML cleanup tool. A cross-site scripting vulnerability exists in Loofah gem for Ruby 2.2.2 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2023-22549 · Gpac +3 · Gpac +3

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to an unchecked return value in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2023-21684 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is an out-of-bounds read in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

Open-AudIT Community 'Attributes' Functionality Cross Site Scripting Vulnerability

Open-AudIT is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress booking-calendar plugin has unspecified vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A security vulnerability exists in WordPress...

Security Bulletin:OpenSource ICU4C Vulnernabilties in IBM eDiscovery Analyzer

Summary International Components for Unicode ICU is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the Locale class in common/locid.cpp. By sending an overly long string, a remote attacker could overflow a buffer and execute arbitrary code on the system or caus...

Security Bulletin:Open Source Apache Tomcat,Commons FileUpload Vulnerabilities affects WebSphere App Server in IBM eDiscovery Manager

Summary Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an attacker could exploit this vulnerability to cause the server to become unresponsive. Vulnerability Details CVEID: CVE-2016-3092...

Security Bulletin: eDiscovery Manager -OpenSource Apache Taglibs Vulnerability (CVE-2015-0254)

Summary OpenSource Apache Taglibs Vulnerability Vulnerability Details CVEID: CVE-2015-0254 DESCRIPTION: Apache Standard Taglibs could allow a remote attacker to execute arbitrary code on the system, caused by an XML External Entity Injection XXE error when processing XML data. By sending...

Security Bulletin: Three security vulnerabilities have been identified in WebSphere Application Server shipped with IBM eDiscovery Manager (CVE-2015-1885, CVE-2015-1927, CVE-2015-1946)

Summary WebSphere Application Server is shipped as a component of IBM eDiscovery Manager. Information about three security vulnerabilities that affect WebSphere Application Server are published in a security bulletin. Vulnerability Details For more information, see the WebSphere Application Serve...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM eDiscovery Manager

Summary WebSphere Application Server is shipped as a component of IBM eDiscovery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the WebSphere Application Server security...

Input validation

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page CWE-80 vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser...