PT-2018-12842

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered that allows Cross-Site Request Forgery CSRF on the "eml/upload/eml/?action=address&do=add" API endpoint. Recommendations For EMLsoft version 5.4.5, consider implementing CSRF protection...

PT-2018-12843

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered that allows Cross-Site Request Forgery CSRF on the "eml/upload/eml/?action=user&do=add" API endpoint. Recommendations For EMLsoft version 5.4.5, consider implementing CSRF protection...

PbootCMS V1.1.7 SQL Injection Vulnerability in Do***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2018-14777: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DataLife Engine DLE through 13.0. An attacker can use XSS related to the /addnews.html and /index.php?do=addnews URIs to send a malicious script to unsuspecting Admins or users...

PT-2018-12716

Name of the Vulnerable Software and Affected Versions DataLife Engine versions prior to 13.0 Description An issue was discovered that allows an attacker to use XSS to send a malicious script to unsuspecting Admins or users, related to the "/addnews.html" and "/index.php?do=addnews" API Endpoints...

CVE-2018-14686

system/editbook.php in XYCMS 1.7 has stored XSS via a crafted adddo.php request, related to addbook.php...

CVE-2018-14415

An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen...

PT-2018-12497

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.10 Description An issue exists where XSS is possible via the fourth and fifth input elements on the "admincp.php?app=prop&do=add" screen. Recommendations For versions prior to 7.0.10, update to version...

UBUNTU-CVE-2018-14378

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2018-14032

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed t...

Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2018-17630)

Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine Applications Manager 13 Build 13780. A...

sorrisoativo.com.br XSS vulnerability

Open Bug Bounty ID: OBB-639039 Description| Value ---|--- Affected Website:| sorrisoativo.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Do not preserve zone information in file attachments

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winzoneinfoattachments.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Do not preserve zone information in file attachments users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

PT-2018-3400

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to an integer overflow in the rtl8139 do receive function of the QEMU hardware emulator. This can lead to a buffer overflow. The vulnerability may allow a remote attacker ...

centraldousuario.clientesa.com.br XSS vulnerability

Open Bug Bounty ID: OBB-630552 Description| Value ---|--- Affected Website:| centraldousuario.clientesa.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

PT-2018-1825

Name of the Vulnerable Software and Affected Versions: file version 5.33 Description: The issue is related to the do core note function in the file command, which is affected by a buffer overflow error. This error allows for out-of-bounds reading, potentially leading to a denial of service. The...

solar-do-furadouro.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629256 Description| Value ---|--- Affected Website:| solar-do-furadouro.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

PT-2019-10405

Name of the Vulnerable Software and Affected Versions GNU patch versions through 2.7.6 Description The issue is related to the do ed script function in pch.c, which fails to block strings starting with a ! character. This syntax is specific to ed and is unrelated to shell metacharacters...

DEBIAN-CVE-2018-11506

The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as...

PT-2018-3863 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16.13 Description: The issue is related to the sr do ioctl function in the Linux kernel, which allows local users to cause a denial of service or possibly have other unspecified impacts due to a stack-based...