2923 matches found
PT-2021-19812 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 11.10.13 XWiki Platform versions prior to 12.6.7 XWiki Platform versions prior to 12.10.2 Description: A user disabled on a wiki using email verification for registration can re-activate themselves by using th...
Unspecified Vulnerability in JetBrains Code With Me
JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A security vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to open a browser on the host computer...
JetBrains Code With Me Code Execution Vulnerability
JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A code execution vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to execute code in read-only mod...
Adobe Acrobat/Reader post-release reuse vulnerability (CNVD-2021-49202)
Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a post-release reuse vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...
Gutenberg - Critical - Access bypass - SA-CONTRIB-2021-007
This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not correctly validate access rules in certain situations allowing anonymous users to delete blocks...
Denial of service
CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular...
CVE-2021-21391
Removed by vendor...
Editing Text in a PDF File
By Uzair Amir PDF Portable Document Format is a file format developed by Adobe Systems that provides an electronic display of information such as documents, presentations, etc. This is a post from HackRead.com Read the original post: Editing Text in a PDF File...
Any logged in user could edit any other logged in user.
Impact Everyone who is running a12n-server. A new HAL-Form was added to allow editing users. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make this change. Patches Patched in v0.18.2...
Insecure Access Controls
@curveball/a12n-server uses insecure access controls. Inadequate permissiosn check allows any authenticated user to perform unauthorized editting of other users' information...
CVE-2021-29452
CVE-2021-29452 : A flawed privilege check in the a12n-server HAL-Form for editing users (v0.18.0) allowed any logged-in user to edit other users. Patched in v0.18.2. Multiple connected advisories corroborate insecure access controls affecting all users of the package; remediation is upgrade to th...
CVE-2021-29452 Any logged in user could edit any other logged in user.
a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make th...
CVE-2021-26076
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.0 allows remote anonymous attackers who can perform an attacker in the middle attack to learn...
Cross site scripting
Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting XSS vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious UR...
WordPress Related Posts 跨站脚本漏洞
WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content to WordPress. A cross-site scripting vulnerability exists in the Related...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26163)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability , the vulnerability stems from post editing via the post content field . An attacker can use this vulnerability to inject arbitrary Web script or HT...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
