847 matches found
gl-consulting.ru Cross Site Scripting vulnerability OBB-1214853
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cross-site Scripting (XSS)
tileserver-gl is vulnerable to cross-site scripting XSS. The vulnerability exists because the key GET parameter is not escaped properly, allowing an attacker to inject malicious script and get it executed when a user visits the application's main page...
TileServer GL Cross-Site Scripting Vulnerability
TileServer GL is an open source map server for vector blocks from the MapTiler team. A cross-site scripting vulnerability exists in the server.js file in TileServer GL 3.0.0 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...
CVE-2020-15500
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
CVE-2020-15500
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
CVE-2020-15500
TileServer GL
CVE-2020-15500
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
PT-2020-14462 · Tileserver Gl · Tileserver-Gl
Name of the Vulnerable Software and Affected Versions: TileServer GL versions prior to 3.0.0 Description: An issue was discovered in server.js where the content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
Arbitrary Code Execution
cups is vulnerable to arbitrary code execution. An insufficient buffer bounds checking flaw was discovered in the HP-GL/2-to-PostScript "hpgltops" filter. An attacker could create a malicious HP-GL/2 file that could, possibly, execute arbitrary code as the "lp" user if the file was printed...
Arbitrary Code Execution
cups is vulnerable to arbitrary code execution. The vulnerability exists as two overflows were discovered in the HP-GL/2-to-PostScript filter. An attacker could create a malicious HP-GL/2 file that could possibly execute arbitrary code as the "lp" user if the file is printed...
Fedora 30 : webkit2gtk3 (2020-f11a905fc2)
Fix issues while trying to play a video on NextCloud. - Make sure the GL video sink uses a valid WebKit shared GL context. - Fix vertical alignment of text containing arabic diacritics. - Fix build with icu 65.1. - Fix page loading errors with websites using HSTS. - Fix web process crash when...
Fedora 31 : webkit2gtk3 (2020-97e849ce46)
Fix issues while trying to play a video on NextCloud. - Make sure the GL video sink uses a valid WebKit shared GL context. - Fix vertical alignment of text containing arabic diacritics. - Fix build with icu 65.1. - Fix page loading errors with websites using HSTS. - Fix web process crash when...
File upload vulnerability in Qibo CMS gl***.php file
Qibo CMS system is a content management system under Guangzhou Qibo Network Technology Co. A file upload vulnerability exists in the gl.php file of the Qibo CMS system. It allows an attacker to upload a webshell and gain server privileges...
CVE-2019-6272
Command injection vulnerability in logincgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code...
CVE-2019-6273
downloadfile in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files...
CVE-2019-6272
Command injection vulnerability in logincgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code...
CVE-2019-6275
Command injection vulnerability in firmwarecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code...
CVE-2019-6274
Directory traversal vulnerability in storagecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences...
