Creative Contact Form extension path traversal vulnerability

Creative Contact Form is a responsive jQuery contact form for Joomla! A path traversal vulnerability exists in the helpers/mailer.php file in the Creative Contact Form extension version 4.6.2 for Joomla! prior to 2019-12-03. The vulnerability stems from a failure of a networked system or product ...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2020-5258 via dojo (>=1.13.0, <=1.13.6)

dojo NPM version =1.13.0, =1.0.0, =4.0.0-alpha.1, =0.1.10, =1.13.0, =1.13.0, =1.13.6 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

CVE-2020-9364: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...

Docker docker-credential-helpers resource management error vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

PT-2019-14979

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description The issue is related to a double free privilege escalation vulnerability in docker-credential-helpers. Recommendations At the moment, there is no information about a newer version that contain...

Docker docker-credential-helpers Double Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within docker-credential-helpers. Th...

CVE-2014-4913

ZF2014-03 has a potential cross site scripting vector in multiple view helpers...

Cross site scripting

ZF2014-03 has a potential cross site scripting vector in multiple view helpers...

CVE-2014-4913

ZF2014-03 has a potential cross site scripting vector in multiple view helpers...

CVE-2014-4913

ZF2014-03 has a potential cross site scripting vector in multiple view helpers...

CVE-2014-4913

CVE-2014-4913 (ZF2014-03) describes a cross-site scripting vulnerability in Zend Framework caused by insufficient validation of client-side data in multiple view helpers. Affected versions include Zend Framework before 2.2.7 and before 2.3.1. Impact is potential execution of arbitrary script in u...

PT-2019-7121

Name of the Vulnerable Software and Affected Versions Zend Framework affected versions not specified Description The issue is related to a potential cross-site scripting vector in multiple view helpers. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2014-4913: Improper Neutralization of Input During Web Page Generation

ZF2014-03 has a potential cross site scripting vector in multiple view helpers...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (1.13.0)

dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

GHSA-4P8F-MMFJ-R45G Cross-site scripting in fat_free_crm

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

CVE-2018-20975

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

Ubuntu: Security Advisory (USN-4103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-20975: Improper Neutralization of Input During Web Page Generation

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

Ubuntu 19.04 : docker-credential-helpers vulnerability (USN-4103-1)

Jasiel Spelman discovered that a double free existed in docker-credential- helpers. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-4103-2 Docker vulnerability

Jasiel Spelman discovered that a double free existed in the docker-credential- helpers dependency of Docker. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code. Original advisory details: Jasiel Spelman discovered that a double free existed in...