CVE-2022-34919

CVE-2022-34919 Система управления контентом Contensis до версии 15.2.1.79 содержит уязвимость в своем интерфейсе 'Classic', которая позволяет неаутентифицированному пользователю загружать и утверждать произвольные файлы. Загрузив файл aspx, можно выполнять команды в контексте веб-сервера. Эта...

CVE-2025-66376

Zimbra Collaboration ZCS 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets CSS @import directives in an HTML e-mail message...

Zimbra Collaboration Suite 安全漏洞

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra. The product includes WebMail, Calendar, Address Book and more. A security vulnerability exists in Zimbra Collaboration Suite ZCS versions 9.0, 10.0, and 10.1, which originates from a local file in an endpoint in the...

CVE-2024-27443

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. A Cross-Site Scripting XSS vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this v...

CVE-2022-28650

In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI...

CVE-2006-5134: Undefined Security Weakness

Mercury SiteScope 8.2 8.1.2.0 allows remote authenticated users to cause a denial of service loss of connectivity to the classic interface via attempted HTML injection into the "new monitor description" field...