4091 matches found
PT-2024-24338 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 13.9-rc-1 through 4.10.18 XWiki Platform versions 13.9-rc-1 through 15.5.3 XWiki Platform versions 13.9-rc-1 through 15.10-rc-1 Description: The XWiki Platform is a generic wiki platform that allows arbitrary remote co...
The vulnerability in the virtual training environment Moodle, related to improper input neutralization during the creation of web pages, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability in the virtual learning environment Moodle is related to the lack of additional filtering for Wiki comments. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
On Secure Voting Systems
Andrew Appel shepherded a public comment--signed by twenty election cybersecurity experts, including myself--on best practices for ballot marking devices and vote tabulation. It was written for the Pennsylvania legislature, but its general in nature. From the executive summary: We believe that no...
The vulnerability of the VPN server for microprogramming router Totolink X2000R, which allows attackers to perform cross-site scripting attacks
The vulnerability of the VPN server for microprogramming routers Totolink X2000R relates to the lack of measures taken to protect the website structure during the processing of the “Comment” input field. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attack...
CVE-2024-25167
Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...
CVE-2024-25167
Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...
EulerOS Virtualization 2.11.0 : zlib (EulerOS-SA-2024-1437)
According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...
SourceCodester Product Review Rating System Cross-Site Scripting Vulnerability
Product Review Rating System is a product review and rating system. A cross-site scripting vulnerability exists in SourceCodester Product Review Rating System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter Your Name/Comment of the component Rate Product...
CVE-2024-0830
The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0. This is due to missing or incorrect nonce validation on several ajax actions. This makes it possible for unauthenticated attackers to invoke...
CVE-2024-0829
The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.0. This is due to missing or incorrect capability checks on several ajax actions. This makes it possible for authenticated attackers, with subscribe...
Cross site request forgery (csrf)
The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0. This is due to missing or incorrect nonce validation on several ajax actions. This makes it possible for unauthenticated attackers to invoke...
The vulnerability of the OTRS request processing system, related to deficiencies in the authentication process, allows a violator to add additional files to the comments of any user.
The vulnerability of the OTRS request processing system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to add additional files to the comments of any user...
CVE-2024-28228
In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...
CVE-2024-28228
In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...
CVE-2024-28228
In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...
JetBrains YouTrack Security Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...
BIT-WORDPRESS-2020-25286
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public...
BIT-WORDPRESS-MULTISITE-2020-25286
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public...