7929 matches found
livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...
Cross-site Scripting (XSS) - Stored in convos-chat/convos
Description The Convos is an open source multi-user chat that runs in a web browser. Characters starting with "https://" in the chat window create tag. Stored XSS vulnerability using onfocus and autofocus occurs because escaping exists for "" but escaping for double quarter does not exist. Proof ...
CVE-2021-4175
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4176
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
livehelperchat cross-site scripting vulnerability (CNVD-2022-01688)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...
livehelperchat 跨站脚本漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...
CVE-2021-4177
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...
Cross-site Scripting (XSS) - Stored in convos-chat/convos
Description The Convos is an open source multi-user chat that runs in a web browser. You can't use SVG extension in Convos' chat window, but you can upload .html extension. This causes Stored XSS. Also, after uploading a file, it does not log in, and XSS occurs even if you connect. Proof of Conce...
Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1
91.4.1-alt1 built Dec. 27, 2021 Andrey Cherepanov in task 292439 Dec. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to...
livehelperchat 跨站脚本漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...
Updated thunderbird packages fix security vulnerability
OpenPGP signature status doesn't consider additional message content. CVE-2021-4126 Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. CVE-2021-44538...
livehelperchat cross-site request forgery vulnerability (CNVD-2022-01694)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...
Security Vulnerabilities fixed in Thunderbird 91.4.1 — Mozilla
When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the addition...
Mozilla Thunderbird < 91.4.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 91.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-55 advisory. - Thunderbird users who use the Matrix chat protocol were vulnerable to a buffer overflow in libolm, that...
Cross-site Scripting (XSS) - Stored in zulip/zulip
Description Zulip is a powerful, open source group chat application that combines the immediacy of real-time chat with the productivity benefits of threaded conversations. Zulip is used by open source projects, Fortune 500 companies, large standards bodies, and others who need a real-time chat...
livehelperchat 跨站请求伪造漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...
CVE-2021-42584
A Stored Cross Site Scripting XSS issue exists in Convos-Chat before 6.32...
CVE-2021-42584
A Stored Cross Site Scripting XSS issue exists in Convos-Chat before 6.32...
