3421 matches found
CVE-2020-19616: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
PT-2021-10374
Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the post header field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the software to a version that include...
langhsu mblog 跨站脚本漏洞
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5.0 suffers from a cross-site scripting vulnerability. Attackers can use the /post/editing post header field to inject arbitrary Web script or HTML...
CVE-2020-19618: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
INSMA Wifi Mini Spy 1080P HD Security IP Camera 代码问题漏洞
INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited by an attacker to execute arbitrary code by editing "recdata"...
CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
Multiple vulnerabilities in baserCMS
Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Improper Neutralization of JavaScript input in the page editing function CWE-79 - CVE-2021-20681 OS command injection CWE-78 - CVE-2021-20682 Improper Neutralization of JavaScript input in the...
baserCMS 跨站脚本漏洞
BaserCMS is an open source enterprise-level content management system cms. A JavaScript Input Improper Neutralization vulnerability exists in the blog post editing feature in versions of BaserCMS prior to 4.4.5. A remote authenticated attacker can exploit this vulnerability to inject arbitrary...
CVE-2021-20683: Improper Neutralization of Input During Web Page Generation
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
baserCMS 跨站脚本漏洞
BaserCMS is an open source enterprise-level content management system cms. A JavaScript Input Improper Neutralization vulnerability exists in the page editing feature in BaserCMS versions prior to 4.4.5. A remote authenticated attacker can exploit this vulnerability to inject arbitrary scripts...
PT-2021-14142
Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the blog article editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified...
PT-2021-14140
Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the page editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20681: Improper Neutralization of Input During Web Page Generation
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34
Calendar is a simple and beautiful calendar application designed to fit GNOME 3. Features: Week, month and year views Basic editing of events Evolution Data Server integration Search support...