4072 matches found
CVE-2018-13002
An XSS issue was discovered in Inhaltsprojekte in Weblication CMS Core & Grid v12.6.24. The vulnerability is located in the wFilemanager.php and index.php files of the /grid5/scripts/ modules. The injection point is located in the Project Title and the execution point occurs in the Inhaltsprojekt...
Design/Logic Flaw
An XSS issue was discovered in Inhaltsprojekte in Weblication CMS Core & Grid v12.6.24. The vulnerability is located in the wFilemanager.php and index.php files of the /grid5/scripts/ modules. The injection point is located in the Project Title and the execution point occurs in the Inhaltsprojekt...
PT-2018-11531
Name of the Vulnerable Software and Affected Versions Weblication CMS Core & Grid version 12.6.24 Description A cross-site scripting XSS issue was found in the Weblication CMS Core & Grid. The vulnerability is located in the wFilemanager.php and index.php files of the /grid5/scripts/ modules. The...
Mozilla: Invalid data handling during QCMS transformations
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Mozilla: Invalid data handling during QCMS transformations
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
UBUNTU-CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Security vulnerabilities fixed in Firefox ESR 52.9 — Mozilla
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. A use-after-free vulnerability can occur when deleti...
CVE-2018-10969
SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...
CVE-2018-10969
SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...
PT-2018-10213
Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the invitation codes grid, potentially leading to unauthorized data access or modification. Recommendations For...
CVE-2018-10969: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...
Security Bulletin: Apache Commons FileUpload Vulnerability affects WebSphere Application Server (CVE-2016-3092)
Summary Apache Commons Fileupload vulnerability affects WebSphere Application Server and WebSphere Application Server Hypervisor Edition. Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload...
ag-grid cross-site scripting vulnerability
ag-grid is a data grid component designed primarily for JavaScript frameworks . A cross-site scripting vulnerability exists in ag-grid. When AngularJ is used with ag-grid, a remote attacker can exploit this vulnerability to inject code with the help of Angular expressions...
Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 7.2.1 security update
An update for Red Hat JBoss Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
CVE-2017-16009
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...
CVE-2017-16009
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...
Cross site scripting
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...
CVE-2017-16009
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...
CVE-2017-16009
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...
CVE-2017-16009
The CVE-2017-16009 entry affects ag-grid when used with AngularJS, where Angular Expressions can be exploited to trigger Cross-site Scripting (XSS). The vulnerability arises from how AngularJS interacts with ag-grid, enabling injected expressions to run in the context of the page. Several connect...