100 matches found
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
parse-server 加密问题漏洞
parse-server is an open source Backend-as-a-Service BaaS framework , it is mainly used for application back-end processing . A security vulnerability exists in Parse Server versions prior to 4.5.0 that stems from LDAP authentication involving user passwords stored in plaintext. No details of the...
Dell BSAFE Micro Edition Suite 缓冲区错误漏洞
The Dell BSAFE Micro Edition Suite is a Dell development toolkit that provides encryption, certificate and transport layer security for c/c++ applications, devices and systems. A buffer overflow vulnerability exists in Dell BSAFE Micro Edition Suite version 4.5, which stems from vulnerability to...
VulnCheck KEV: CVE-2020-35945
An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the...
IrfanView Memory Corruption Vulnerability
IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.53. An attacker can exploit this vulnerability to cause the application ...
PT-2019-6092 · Unknown +9 · Squashfs-Tools +9
Name of the Vulnerable Software and Affected Versions: Squashfs-Tools version 4.5 Description: The issue is related to the squashfs opendir function in the unsquash-1.c component of Squashfs-Tools. This function stores the filename in the directory entry, which is then used by unsquashfs to creat...
CVE-2019-9622
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...
CVE-2018-12818
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure...
DEBIAN-CVE-2018-1000132
Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...
CVE-2017-11273
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure...
EMC Documentum D2 Cross-Site Scripting Vulnerability (CNVD-2017-01159)
EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...
IBM Connections Information Disclosure Vulnerability (CNVD-2016-11535)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...
EMC Documentum D2 Cross-Site Scripting Vulnerability
EMC Documentum D2 is the advanced, intuitive, configurable and content-centric Documentum client that accelerates adoption of ECM applications. EMC Documentum D2 version 4.5 contains a cross-site scripting vulnerability that could allow an attacker to inject malicious HTML or script...
EMC Document Sciences xPression SQL Injection Vulnerability
EMC Document Sciences is a customer communications management solution. A SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression versions 4.2, 4.5 SP1 can be exploited by remote attackers to access or modify information on an affected system by executing SQL comman...
DLGuard SQL Injection Vulnerability
DLGuard is a complete sales and customer management system used to protect and streamline online business. A SQL injection vulnerability exists in DLGuard version 4.5, which stems from the index.php script failing to adequately filter the 'c' parameter. A remote attacker can exploit this...
PT-2006-7313 · Sugarcrm · Sugarcrm Open Source
Name of the Vulnerable Software and Affected Versions: SugarCRM Open Source versions 4.5.0f and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Recommendations: For SugarCRM Ope...
PT-2006-4158 · Namo · Namo Deepsearch
Name of the Vulnerable Software and Affected Versions: Namo DeepSearch version 4.5 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the p parameter in the mclient.cgi component. Recommendations: For Namo...
2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 (KB4458614)
2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 KB4458614...
2017-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 (KB4043768)
2017-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 KB4043768...