1331 matches found
PT-2022-17683 · Fortinet · Fortimail
Name of the Vulnerable Software and Affected Versions: FortiMail versions prior to 7.2.0 Description: The issue is related to an improper neutralization of input during web page generation, which may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending...
Google Chrome 竞争条件问题漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a confusion in the instruction responsible for freeing memory in PhoneHub. An attacker could use this vulnerability to...
GHSA-H3W2-QG2R-C7MF Kirby CMS 2.5.12 Cross-site Scripting
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...
CVE-2018-14520
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...
CVE-2018-14520
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...
CVE-2018-14520
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...
Security Bulletin: Vulnerability in Cache-Control header usage affects IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x (CVE-2016-8981).
Summary IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Vulnerability Details CVEID: CVE-2016-898...
The vulnerability of the SAP Enterprise Portal web portal of the SAP NetWeaver integration platform allows a hacker to perform cross-site scripting attacks.
The vulnerability of the SAP Enterprise Portal, a component of the SAP NetWeaver integration platform, is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2021-46304
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...
CVE-2022-35869
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 b2022030114. Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The...
[SECURITY] Fedora 36 Update: php-8.1.8-1.fc36
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
CVE-2020-4138
IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049...
Code injection
IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049...
The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to the failure to remove script-related HTML tags from web pages, allows attackers to perform cross-site scripting attacks.
The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to the lack of measures taken to eliminate script-related HTML tags on the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...
CVE-2022-23763
Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...
CVE-2022-23763 DOUZONE BIZON NeoRS file download and execute vulnerability
Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...
IBM Jazz Team Server Information Disclosure Vulnerability (CNVD-2022-51658)
IBM Jazz Team Server is an application server from IBM Corporation of America. IBM Jazz Team Server provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.An...
The vulnerability of the Java Runtime Environment software lies in the lack of measures taken to eliminate scipt-related tags on web pages, allowing attackers to compromise the integrity of the protected information.
The vulnerability of the Java Runtime Environment software relates to the failure to remove scipt-related tags from web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...