CVE-2020-8594

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...

Ninja Forms < 3.4.23 - CSRF to Stored Cross-Site Scripting (XSS)

Authenticated Stored XSS vulnerabilities in recaptchasitekey, recaptchasecretkey, recaptchalang and dateformat keys, which can be performed via CSRF attacks...

WordPress Core 5.2.3 - Viewing UnauthenticatedPasswordPrivate Posts

WordPress Core 5.2.3 - Viewing UnauthenticatedPasswordPrivate Posts So far we know that adding ?static=1 to a wordpress URL should leak its secret content Here are a few ways to manipulate the returned entries: - order with asc or desc - orderby - m with m=YYYY, m=YYYYMM or m=YYYYMMDD date format...

Description of the security update for SharePoint Server 2019: October 8, 2019

None None...

Description of the security update for SharePoint Enterprise Server 2016: June 11, 2019

None None...

May 28, 2019—KB4499162 (OS Build 15063.1839)

None None...

May 28, 2019—KB4499147 (OS Build 16299.1182)

None None...

May 23, 2019—KB4499182 (Preview of Monthly Rollup)

None None...

May 23, 2019—KB4499178 (Preview of Monthly Rollup)

None None...

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...

January 17, 2019—KB4480974 (Preview of Monthly Rollup)

None None...

Information Disclosure Through Date Template Filter

Django is vulnerable to information disclosure. This vulnerability is caused in the getformat function in utils/formats.py which allows a malicious user to obtain any secret in the application settings by specifying a settings key name instead of a date format...

Preparing for Y2038 (Already?!)

It somehow doesn't seem that long ago, but nineteen years ago during Y2K I spent my New Year's Eve in the Akamai Network Operations center, waiting to respond to anything that might go awry as the clock struck midnight in key time zones such as Greenwich and Boston. As of January 9, 2019, we are...

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB 4459932)

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 KB 4459932 Applies to: Microsoft .NET Framework 3.5 Notice This update is included in the Preview of Quality Rollup that's dated November 27, 2018. This update was previously released as part of the...

November 27, 2018—KB4467695 (Preview of Monthly Rollup)

None None...

picgrace.com XSS vulnerability

Open Bug Bounty ID: OBB-649362 Description| Value ---|--- Affected Website:| picgrace.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Description of the security update for SharePoint Enterprise Server 2016: June 12, 2018

None None...

HTTP Client in JIRA does not accept RFC6265 compliant date format in "Expires" cookie header

When using AWS Application Load Balancer, the following WARN log messages are shown in the logs, as JIRA does not understand the "Expires" header used for sticky sessions. code:java 2017-09-27 01:44:47,292 HealthCheck:thread-7 WARN o.a.h.client.protocol.ResponseProcessCookies Invalid cookie heade...

SUSE-SU-2017:2453-1 Security update for SUSE Manager Server 3.0

This update for the SUSE Manager Server 3.0 provides several fixes and improvements. The following security issue has been fixed: spacewalk-java: - CVE-2017-7538: Do not allow HTML code injection via Cross Site Scripting XSS in the Organization Name. bsc1048968 Additionally, the following...

Burden TMA v2.1.1 - (Task) Persistent Web Vulnerability

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...