3901 matches found
Cross site scripting
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-4133
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
UBUNTU-CVE-2018-4133
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-4133
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Apple Safari WebKit cross-site scripting vulnerability (CNVD-2018-07657)
Apple Safari is a web browser from Apple, and is the default browser that comes with the Mac OS X and iOS operating systems.WebKit is a set of open-source web browser engines developed by KDE, Apple, and Google, and is currently used by Apple Safari and Google Chrome, among other browsers. Google...
Updated mailman packages fix a security vulnerability
Updated mailman package fixes security vulnerability: Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed ...
Exodus Wallet (ElectronJS Framework) - Remote Code Execution Exploit
Exploit for windows platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code...
dsmall Physical Path Disclosure Vulnerability
dsmall is a multi-user platform-level online shopping mall system. A security vulnerability exists in dsmall version 20180320. An attacker can exploit the vulnerability by sending public/index.php/home/predeposit/index.html?pdrsn=request to obtain a physical path...
Code injection
IBM RSA DM IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625...
CVE-2017-1602
IBM RSA DM IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625...
CVE-2017-1602
IBM RSA DM IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625...
CVE-2018-6842
Kentico CMS is affected by CVE-2018-6842: XSS due to improper construction/validation when crafting a URL. Affected versions are Kentico 10.x before 10.0.50 and 11.x before 11.0.3. Impact is client-side script execution in authenticated/selected contexts via crafted URLs. Remediation per document...
Ubuntu 14.04 LTS / 16.04 LTS : sensible-utils vulnerability (USN-3584-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3584-1 advisory. Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker...
CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Debian: Security Advisory (DSA-4108-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Tivoli Business Service Manager Cross-Site Scripting Vulnerability (CNVD-2018-02991)
IBM Tivoli Business Service Manager is a suite of enterprise-class business service management BSM solutions from IBM in the United States. The solution provides real-time service visibility and health indicators, multiple KPI historical time analysis and tracking, and more. A cross-site scriptin...