Cross-Site Request Forgery (CSRF)

samba is vulnerable to cross-site request forgery CSRF. It was found that SWAT web pages did not protect against Cross-Site Request Forgery CSRF attacks. If a remote attacker could trick a user, who was logged into the SWAT interface, into visiting a specially-crafted URL, the attacker could...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Information Disclosure

seamonkey is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the way SeaMonkey saved certain web pages to a local file. If a user saved the inner frame of a web page containing POST data, the POST data could be revealed to the inner frame, possibly surrenderi...

Google Chrome Multifunction Box Policy Enforcement Deficiency Vulnerability

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in omnibox in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to bypass security restrictions with the help of specially...

Unspecified Vulnerability in Google Chrome (CNVD-2020-38213)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome suffers from an unspecified vulnerability (CNVD-2020-38209)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

[SECURITY] Fedora 30 Update: ckeditor-4.14.0-1.fc30

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 31 Update: ckeditor-4.14.0-1.fc31

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 32 Update: ckeditor-4.14.0-1.fc32

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 30 Update: php-7.3.16-1.fc30

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 31 Update: php-7.3.16-1.fc31

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 30 Update: varnish-6.3.2-3.fc30

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

[SECURITY] Fedora 31 Update: varnish-6.3.2-3.fc31

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

NETSAS Enigma NMS Information Disclosure Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A security vulnerability exists in NETSAS Enigma NMS version 65.0.0 and prior versions, which originates from the program's failure to encrypt sensitive data rendered in a web page. An attacker can...

CVE-2019-16063

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data...

CVE-2019-16063

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially...