3604 matches found
PT-2019-18398
Name of the Vulnerable Software and Affected Versions Foxit 3D Plugin Beta versions prior to 9.4.0.16807 for Foxit Reader and PhantomPDF Description The issue arises from the application's handling of specifically crafted 3D content in PDF files, potentially leading to a crash due to a...
CVE-2019-6803
typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar...
GHSA-4P24-VMCR-4GQJ Bootstrap Cross-site Scripting vulnerability
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info...
WinSCP Arbitrary File Overwrite Vulnerability - Windows
WinSCP is prone to an arbitrary file overwrie vulnerability SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:winscp:winscp";...
CVE-2016-10735
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...
CVE-2016-10735
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...
CVE-2018-20675
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A before v1.21B08Beta, DIR-850L B before v2.22B03Beta, and DIR-880L A before v1.20B02Beta devices allow authentication bypass...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
Cross site request forgery (csrf)
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-20613
CVE-2018-20613 is described as a CSRF issue in TEMMOKU T1.09 Beta that could allow admin/user/add actions. The connected documents do not provide concrete technical details (no affected versions, root cause, impact, or fixes) beyond noting CSRF. No exploitation details are present in the provided...
PT-2018-15477
Name of the Vulnerable Software and Affected Versions TEMMOKU T1.09 Beta Description The issue allows for a CSRF attack on the admin/user/add functionality. Recommendations For TEMMOKU T1.09 Beta, consider implementing CSRF protection mechanisms to prevent unauthorized requests to the...
CVE-2018-20613: Cross-Site Request Forgery (CSRF)
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
beta.medworm.com XSS vulnerability
Open Bug Bounty ID: OBB-714983 Description| Value ---|--- Affected Website:| beta.medworm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
1Password for macOS Information Disclosure Vulnerability
1Password for macOS is a macOS-based application for storing and managing personal passwords. An information disclosure vulnerability exists in version 7.2.3.BETA prior to 1Password 7.2.3.BETA-3 for macOS-based platforms, which can be exploited by attackers to obtain sensitive information...
Frappe ERPNext SQL Injection Vulnerability (CNVD-2019-17163)
Frappe ERPNext is an open source ERP Enterprise Resource Planning system. The system includes functions for financial management, inventory management, customer relationship management, project management and human resource management. A SQL injection vulnerability exists in Frappe ERPNext versio...
beta-tools.com XSS vulnerability
Open Bug Bounty ID: OBB-709946 Description| Value ---|--- Affected Website:| beta-tools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
beta-wp.itsu.com XSS vulnerability
Open Bug Bounty ID: OBB-707762 Description| Value ---|--- Affected Website:| beta-wp.itsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
CVE-2018-19859
OpenRefine before 3.2 beta is vulnerable to directory traversal via a relative pathname in a ZIP archive (CVE-2018-19859). The issue is confirmed across multiple advisories linking to OpenRefine's project import path handling. Mitigation known in the connected docs includes patches suggested by P...