10478 matches found
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
CVE-2020-9336 affects fauzantrif eLection 2.0, a web-based election system. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Admin Dashboard → Settings → Election → 'message if election is closed' field. Root cause: input in that field is not properly sanitized, enabling...
CVE-2020-9336: Improper Neutralization of Input During Web Page Generation
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
PT-2020-20591
Name of the Vulnerable Software and Affected Versions fauzantrif eLection version 2.0 Description The issue concerns a Cross-Site Scripting XSS flaw. It occurs via the Admin Dashboard, specifically in the Settings - Election section, where the "message if election is closed" field is vulnerable...
CVE-2020-8959
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...
CVE-2020-8959
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...
CVE-2020-8959
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...
CVE-2020-8959
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...
CVE-2020-8959
CVE-2020-8959 affects Western Digital WesternDigitalSSDDashboardSetup.exe prior to version 3.0.2.0 and is described as allowing DLL hijacking. The vulnerability arises from the installer’s handling of DLL loading, with impacts stated as high for confidentiality, integrity, and availability, and a...
CVE-2019-13966
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
Design/Logic Flaw
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
CVE-2019-13966
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
Detections Released for ESU Updates on EOL Windows 7, 2008 and 2008 R2
For the February 2020 Patch Tuesday, Microsoft released security updates for Windows 7, 2008 and 2008 R2 systems which are already end of life. Qualys released Patch Tuesday detections QIDs which check for these new ESU patches as well. Update: Qualys released IG QID 45424 to identify the presenc...
CVE-2019-13966: Improper Neutralization of Input During Web Page Generation
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
Security Bulletin: WebSphere Dashboard Framework contains a vulnerability that allows file access and deletion.
Summary WebSphere Dashboard Framework contains a vulerability in a charting feature used to access and delete generated images in a temporary folder. A fix has been created that removes the vulnerability. Vulnerability Details WebSphere Dashboard Framework contains a vulnerability in a charting...
Vanilla cross-site scripting vulnerability (CNVD-2020-04666)
Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla version 2.6.3 in index.php?p = / dashboard / settings / branding. The vulnerability stems from a lack of proper validation of client-side data in the web application. A...
Cross site scripting
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
