CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

PT-2019-14541

Name of the Vulnerable Software and Affected Versions Padrino Framework breadcrumbs contributed module version 0.2.0 and earlier Description The issue allows for XSS via a caption in the breadcrumbs contributed module. Recommendations For Padrino Framework breadcrumbs contributed module version...

CVE-2019-16145: Improper Neutralization of Input During Web Page Generation

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-14297

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx...

PT-2019-13594

Name of the Vulnerable Software and Affected Versions Veeam ONE Reporter version 9.5.0.3201 Description The issue allows for cross-site scripting XSS attacks via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in "CommonDataHandlerReadOnly.ashx" API endpoint. This can...

CVE-2019-14297: Improper Neutralization of Input During Web Page Generation

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx...

Information Disclosure

Firefox, Firefox ESR and Thunderbird are vulnerable to information disclosure. Remote attackers could exploit the vulnerable Video Caption Handler component by load video captions from other domains to cause potential information disclosure for video captions...

Veeam ONE Reporter 9.5.0.3201 - Persistent Cross-site Scripting (Add/Edit Widget) Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Veeam ONE Reporter - Stored Cross-site Scripting Add/Edit Widget Exploit Author: Seyed Sadegh Khatami Website: https://www.cert.ir Vendor Homepage: https://www.veeam.com/ Software Link:...

CVE-2019-9168

WooCommerce before 3.5.5 allows XSS via a Photoswipe caption...

Cross site scripting

WooCommerce before 3.5.5 allows XSS via a Photoswipe caption...

CVE-2019-9168

WooCommerce before 3.5.5 allows XSS via a Photoswipe caption...

PT-2019-19409

Name of the Vulnerable Software and Affected Versions WooCommerce versions prior to 3.5.5 Description The issue allows for XSS via a Photoswipe caption. Recommendations For versions prior to 3.5.5, update to version 3.5.5 or later to resolve the issue...

CVE-2019-9168: Improper Neutralization of Input During Web Page Generation

WooCommerce before 3.5.5 allows XSS via a Photoswipe caption...

imagemagick/ping_mvg_fuzzer: Crash in GlobExpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5703754605658112 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN RE...

May 23, 2018—KB4100403 (OS Build 17134.81)

None None...

CVE-2018-7717

The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended SIGE extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1...

CVE-2018-7717

The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended SIGE extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1...

PT-2018-18231

Name of the Vulnerable Software and Affected Versions: Kubik-Rubik Simple Image Gallery Extended SIGE extension versions 3.2.3 Description: The issue concerns the htmlImageAddTitleAttribute function in sige.php, which is susceptible to XSS attacks through a crafted image header. Specifically, thi...

CVE-2017-16356: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Kubik-Rubik SIGE aka Simple Image Gallery Extended before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/pluginsige/print.php link with a crafted img, name, or caption parameter...