9682 matches found
DEBIAN-CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
Design/Logic Flaw
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
UBUNTU-CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
CVE-2020-36308
CVE-2020-36308 affects Redmine prior to 4.0.7 and 4.1.x prior to 4.1.1. The issue lets an attacker discover the subject of a non-visible issue by exporting to CSV and reading time entries, resulting in information disclosure. Concretely, CSV export of time entries can reveal unseen issue subjects...
PT-2021-4607 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions 4.0.0 through 4.0.6 Redmine versions 4.1.0 through 4.1.0 Description: The issue allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries. It is related to insufficien...
The vulnerability of the filter during the export of Jira bug tracking system files allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the filter during the export of Jira bug tracking system files is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...
Redmine 注入漏洞
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in Redmine versions prior to 4.0.7 and versions prior to 4.1.1.1 in...
CVE-2021-30141
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
CVE-2021-24169
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...
CVE-2021-24169
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...
Cross site scripting
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...
InsightIDR’s Log Search: Recent Enhancements and Upcoming Investments
Log data is critical to ensuring that you have full visibility into what’s going on across your environment. Alongside endpoint and network data, log data enables teams to detect malicious activity, prove compliance, and have better visibility across their environment. Within InsightIDR, our Log...
Automattic WooCommerce 跨站脚本漏洞
Automattic WooCommerce is an open source e-commerce platform based on WordPress from Automattic, Inc. in the United States. A security vulnerability exists in the WooCommerce WordPress plugin Advanced Order Export prior to version 3.1.8. The vulnerability stems from the tab parameter in the admin...
Friendica 安全漏洞
Friendica is an application for the German Friendica community. Provides decentralized social networking. A security vulnerability exists in Friendica version 2021.01 and earlier versions of Module/Settings/UserExport.php, which allows anonymous users to use userexport settings...
Automattic WooCommerce Order Export Cross-Site Scripting Vulnerability
Automattic WooCommerce is the United States Automattic company's set of open source e-commerce platform based on WordPress . A cross-site scripting vulnerability exists in WooCommerce Order Export in versions prior to 3.1.8. The vulnerability stems from the fact that Advanced Order Export allows...
The vulnerability of the “Export” function in the web application for phpMyAdmin’s database administration system allows a hacker to execute arbitrary code.
The vulnerability of the “Export” function in the phpMyAdmin web application for database management involves the absence of a mechanism to neutralize elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by opening a specially crafted CSV file...