1749 matches found
Path traversal
A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...
CVE-2019-9016
An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...
CVE-2019-9015
A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...
CVE-2019-9015
CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....
PT-2019-19311
Name of the Vulnerable Software and Affected Versions MOPCMS versions through 2018-11-30 Description A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request. This can be demonstrated by the...
PT-2019-19310
Name of the Vulnerable Software and Affected Versions MOPCMS versions prior to 2018-11-30 Description A Path Traversal issue was discovered, allowing the deletion of critical files. The issue is related to the "column management" function, where the path added to the column is not verified. This...
CVE-2019-9015: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...
CVE-2019-9016: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...
SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:0119-1)
This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed : CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-317...
DEBIAN-CVE-2018-20541
There is a heap-based buffer overflow in libxsmmsparsecscreader at generatorspgemmcscreader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 which is in a different part of the source code and is seen at different addresses...
DEBIAN-CVE-2018-20542
There is a heap-based buffer-overflow at generatorspgemmcscreader.c function libxsmmsparsecscreader in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 which is in a different part of the source code and is seen at a different address...
CVE-2018-20339: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
PT-2018-15317
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows for XSS in the Notes column of the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version...
Metinfo Cross-Site Scripting Vulnerability (CNVD-2019-05925)
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the admin/column/move.php interface in Metinfo version 6.1.3. A remote attacker can exploit this vulnerability to inject arbitrary web...
Cross site scripting
Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...
PT-2018-15119
Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue is related to reflected XSS. It can be exploited via the lang columnerr4 parameter in the "admin/column/move.php" endpoint. Recommendations For Metinfo version 6.1.3, consider restricting access to t...
CVE-2018-19835: Improper Neutralization of Input During Web Page Generation
Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...
Exploit for Code Injection in Node-Postgres Pg
CVE-2017-16082 Overview Affected versions of pg con...
