PYSEC-2019-152

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2019-10141: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

July 16, 2019—KB4507466 (OS Build 17134.915)

None None...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

June 26, 2019—KB4509478 (OS Build 17134.860)

None None...

June 18, 2019—KB4503289 (OS Build 15063.1897)

None None...

PT-2019-2988

Name of the Vulnerable Software and Affected Versions openstack-ironic-inspector versions prior to 5.0.2 openstack-ironic-inspector versions prior to 6.0.3 openstack-ironic-inspector versions prior to 7.2.4 openstack-ironic-inspector versions prior to 8.0.3 openstack-ironic-inspector versions pri...

LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-02523)

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A cross-site scripting vulnerability exists in LimeSurvey versions prior to 2.72.4,...

LimeSurvey < 2.72.4 XSS Vulnerability

LimeSurvey is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-18358

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later aka Resume later feature to enter an email address, which is mishandled in the admin panel...

PT-2019-8298

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 2.72.4 Description The issue concerns a Stored XSS that can be triggered by utilizing the Continue Later feature to input an email address. This email address is then mishandled within the admin panel, leading to...

CVE-2017-18358: Improper Neutralization of Input During Web Page Generation

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later aka Resume later feature to enter an email address, which is mishandled in the admin panel...

PT-2018-13818

Name of the Vulnerable Software and Affected Versions Lizard formerly LZ5 version 2.0 Description A denial of service issue was found, related to the use of an invalid memory address in the LZ5 compress continue function in lz5 compress.c, specifically with LZ5 compress fastSmall and MEM read32...

CVE-2018-7636: Improper Neutralization of Input During Web Page Generation

The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScript or HTML via specially crafted URLs...

Palo Alto PAN-OS cross-site scripting vulnerability (CNVD-2018-15748)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the continue page of Palo Alto Networks PAN-OS 8.0.10 and earlier versions. The vulnerability can be exploited to inject arbitrary...

Cross Site Scripting in PAN-OS

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS URL filtering “continue page” Ref PAN-OS 90835, CVE-2018-7636. PAN-OS software does not properly validate specific request parameters. Successful exploitation of this issue may allow an attacker to inject arbitrary JavaScript or HTML i...

PT-2018-18175

Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.0.0 through 8.0.10 Description A Cross-Site Scripting XSS issue exists in the PAN-OS URL filtering “continue page” due to improper validation of specific request parameters. This allows an attacker to inject arbitrary...

Microsoft Windows: Continue experiences on this device

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincontinueexperiencedevice.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Continue experiences on this device Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...