5929 matches found
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-39370)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
Thycotic Secret Server Cross-Site Scripting Vulnerability (CNVD-2019-38073)
Thycotic Secret Server is a privileged account management solution from Thycotic USA. A cross-site scripting vulnerability exists in Thycotic Secret Server versions prior to 10.7. The vulnerability stems from the lack of proper validation of client-side data by the WEB application, and can be...
CVE-2019-13718
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
WordPress Exquisite Ultimate Newspaper theme cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Exquisite Ultimate Newspaper theme is a newspaper website theme plugin used in it. A cross-site scripting vulnerability exists in...
WordPress indieweb-post-kinds plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. indieweb-post-kinds is one of the category plugins used in it. A cross-site scripting vulnerability exists in WordPress...
Foxit Studio Photo Out-of-Bounds Read Information Disclosure Vulnerability
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An out-of-bounds read disclosure vulnerability exists in JPEG to EPS conversion in Foxit Studio Photo 3.6.6.915 and earlier versions. The vulnerability stems from a lack of proper validation of user-suppli...
Loofah gem for Ruby cross-site scripting vulnerability (CNVD-2019-36965)
Loofah gem for Ruby is a Ruby-based library for processing and converting HTML/XML documents. A cross-site scripting vulnerability in Loofah gem for Ruby version 2.3.0 and earlier, which stems from a lack of proper validation of client-side data in a web application, can be exploited by an attack...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37885)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...
CVE-2019-14862
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
Verodin Cross-Site Scripting Vulnerability
Verodin is a suite of network security inspection platforms from Verodin, Inc. in the United States. The platform is primarily used to test the effectiveness of security protections for networks, endpoints, email, and cloud controls.Director is Verodin's console program. A cross-site scripting...
Rocket.Chat Cross-Site Scripting Vulnerability (CNVD-2019-36863)
Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions of Rocket.Chat prior to 2.1.0, which stems from a lack of proper validation of client-side data by the web application and can be exploited by an attacker to execute client-side code...
CVE-2019-13545
In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution...
CVE-2019-13545
In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution...
Input validation
In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution...
CVE-2019-13545
CVE-2019-13545 affects Horner Automation Cscape (versions 9.90 and earlier). The vulnerability is an out-of-bounds write caused by improper validation of data, which may allow arbitrary code execution. Related advisories describe a CSP-file parsing path and imply remote/code execution scenarios, ...
WordPress events-manager plugin cross-site scripting vulnerability (CNVD-2020-28770)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. events-manager is an events management plugin used in it. Cross-site scripting vulnerability exists in WordPress events-manager...
CVE-2019-6475
Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...
CVE-2019-6475 A flaw in mirror zone validity checking can allow zone data to be spoofed
Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...