6578 matches found
@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +2859 more potentially affected by CVE-2020-26237 via highlight.js (>=9.0.0, <=9.18.1)
highlight.js NPM version =9.0.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =2.0.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves: CVE-2020-26237 Source advisory...
Sourcecodester SourceCodester Grocery Store Sales And Inventory System SQL Injection Vulnerability
Sourcecodester SourceCodester Grocery Store Sales And Inventory System is a grocery store sales and inventory management system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Grocery Store Sales And Inventory System version 1.0, which can be exploited by an attack...
PT-2020-16485
Name of the Vulnerable Software and Affected Versions Kaa IoT Platform version 1.2.0 Description The issue allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parameter in the Dashboards section. This enables attackers to execute arbitrary code o...
Sourcecodester SourceCodester Grocery Store Sales And Inventory System SQL注入漏洞
Sourcecodester SourceCodester Grocery Store Sales And Inventory System is a grocery store sales and inventory management system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Grocery Store Sales And Inventory System version 1.0, which can be exploited by an attack...
reddoxx maildepot Cross-Site Scripting Vulnerability
reddoxx maildepot reddoxx maildepot is an e-mail archiving software from German reddoxx. The software stores all e-mails automatically and permanently in an archive independent of the mail server. A cross-site scripting vulnerability exists in MailDepot version 2033 2.3.3022, which stems from a...
GoCD: XSS In https://docs.gocd.org/current/
Searches on docs.gocd.org were subject to a client-side XSS issue...
CVE-2020-17024
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...
CVE-2020-17024
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...
Privilege escalation
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...
CVE-2020-17024
CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...
CVE-2020-17024: Undefined Security Weakness
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability...
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability
...
XooNIps Cross-Site Scripting Vulnerability (CNVD-2020-63192)
XooNIps is a content management system for the field of neuroscience by the XooNIps team in Japan. A cross-site scripting vulnerability exists in XooNIps version 3.49 and prior versions, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can explo...
PT-2020-4864 · Microsoft · Windows Client Side Rendering Print Provider +1
Name of the Vulnerable Software and Affected Versions: Windows Client Side Rendering Print Provider affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Client Side Rendering Print Provider component of the Windows operating system...
KB4586787: Windows 10 November 2020 Security Update
The Microsoft 4586787 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...
KB4586785: Windows 10 Version 1803 November 2020 Security Update
The Microsoft 4586785 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...
QNAP Systems TS-870 Cross-Site Scripting Vulnerability
QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in PhotoStation Filenames in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of client...
QNAP Systems TS-870 Cross-Site Scripting Vulnerability
QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in the File Name of Music Station in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of...