27 matches found
Jenkins List Git Branches Parameter 插件跨站脚本漏洞
Jenkins and Jenkins Plugin are both products of Jenkins, which is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building and deploying projects, and the Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier is vulnerable to a cross-site...
Vulnerabilities fixed in Cobbler
The Cobbler project has fixed two vulnerabilities. A local malicious party can exploit the vulnerabilities to view configuration files or locally execute arbitrary code execute arbitrary code under the application's permissions. A third vulnerability was also found, CVE-2021-45081. There are...
Stored XSS vulnerability in chosen-views-tabbar
chosen-views-tabbar 1.2 and earlier does not escape view names in the dropdown to select views. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with the ability to configure views. As of publication of this advisory, there is no fix...
Huawei E5756S Authentication Bypass Vulnerability
The Huawei E5756S is a Unicom 3G Internet card device from Huawei China. A security vulnerability exists in the Huawei E5756S V100R001B100D00SP00C00 version, which stems from an imperfect WebUI interface authentication mechanism. The vulnerability can be exploited by a remote attacker to view the...
CVE-2017-6772
A vulnerability in Cisco Elastic Services Controller ESC could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and...
CVE-2013-1887
Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...
