4722 matches found
Xiuno BBS code issue vulnerability
Xiuno BBS is an open source forum program based on PHP and MySQL. A code issue vulnerability exists in Xiuno BBS version 4.0. The vulnerability stems from an improperly designed or implemented problem in the code development process of a web system or product. No detailed vulnerability details ar...
PT-2019-14725 · Jenkins · Jenkins Rapiddeploy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin version 4.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy Plugin version 4.1 and earlier, updat...
PT-2019-14726 · Jenkins · Jenkins Rapiddeploy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin versions 4.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy...
CVE-2019-19748
The Work Time Calendar app before 4.7.1 for Jira allows XSS...
Xen Denial of Service and Elevation of Privilege Vulnerability (CNVD-2020-07291)
Xen is an open source virtual machine monitor product. A denial of service and elevation of privilege vulnerability exists in Xen 4.12. and earlier versions. An attacker could exploit this vulnerability to cause a denial of service or possibly gain privileges...
Xen Denial of Service Vulnerability (CNVD-2020-07295)
Xen is an open source virtual machine monitor product. A denial of service vulnerability exists in Xen 4.12. and earlier versions. The vulnerability stems from improper handling of certain bit iterations. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-0395
SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...
DEBIAN-CVE-2019-19582
An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...
Webshell Bypass Vulnerability in Web Security Dog APACHE Version 4.0
Security Dog provides users with lightweight, efficient, reliable and stable cloud security products and a full range of security services. A webshell bypass vulnerability exists in APACHE version 4.0 of Website Security Dog, which can be exploited by attackers to gain access to the control...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43413)
FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/dialplans/dialplandetailedit.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43410)
FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/voicemailgreetings/voicemailgreetingedit.php in FusionPBX 4.4.1. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via t...
PT-2019-15833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.4.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail id parameters in the voicemail greeting edit.php file. Recommendations: For FusionPBX...
IrfanView Memory Corruption Vulnerability
IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.53. An attacker can exploit this vulnerability to cause the application ...
CVE-2019-0382
A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...
SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-42431)
SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. A cross-site scripting vulnerability exists in SAP Business Objects...
TYPO3 Encryption Problem Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.4 and 4.4.x prior to 4.4.1. An attacker can exploit the vulnerability to brute-force hash values...
ARP-GUARD SQL Injection Vulnerability
ARP-GUARD is a network access control solution. A SQL injection vulnerability exists in ARP-GUARD version 4.0.0-5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an attacker to execute illegal SQL...
Zucchetti InfoBusiness Code Execution Vulnerability (CNVD-2019-39372)
Zucchetti InfoBusiness is a business intelligence solution that uses multiple data to generate reports to measure company trends. A code execution vulnerability exists in Zucchetti InfoBusiness 4.4.1 and earlier versions. An attacker can exploit this vulnerability to achieve code execution by...
Zucchetti InfoBusiness Cross-Site Scripting Vulnerability
Zucchetti InfoBusiness is a business intelligence solution that uses multiple data to generate reports to measure company trends. A reflected cross-site scripting vulnerability exists in Zucchetti InfoBusiness 4.4.1 and earlier versions. The vulnerability stems from the failure of the browsing...