11469 matches found
CVE-2020-22782
Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...
CVE-2020-22782
Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...
CVE-2020-22785
Etherpad 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check...
Design/Logic Flaw
Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...
CVE-2020-22782
Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...
CVE-2020-22785
Etherpad 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check...
CVE-2021-25838
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...
CVE-2021-25838
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...
Cross site scripting
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...
CVE-2021-25838
MintHCM Release 3.0.8 contains an XSS vulnerability in the Import feature during file-upload. The issue arises from the Import functionality allowing an attacker to inject and execute JavaScript in uploaded content, enabling cross-site scripting. Impact is limited to XSS as described in multiple ...
CVE-2021-25838
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...
MintHCM 跨站脚本漏洞
MINTHCM is a human resources management software developed by MINTHCM MintHCM A cross-site scripting vulnerability exists in version 3.0.8. The vulnerability stems from the Import feature that allows an attacker to perform cross-site scripting XSS loads in file uploads, which can be exploited by ...
Information Disclosure
Thunderbird is vulnerable to information disclosure. The vulnerability exists due to the system unprotecting a secret OpenPGP key prior to using it for decryption ,signing or key import task...
UBUNTU-CVE-2021-29950
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state. This vulnerability affects Thunderbird 78.8.1...
PT-2021-11123 · Siemens · Logo! Soft Comfort
Name of the Vulnerable Software and Affected Versions: LOGO! Soft Comfort versions prior to V8.4 Description: A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. This issue could ultimately lead to a system takeover by an attacker if...
The vulnerability of the Thunderbird email client, related to insufficient checking of imported OpenPGP keys, allows a hacker to send arbitrary encrypted messages.
The vulnerability of the Thunderbird email client is related to insufficient checking of imported OpenPGP keys. Exploiting this vulnerability allows a malicious actor to send arbitrary encrypted messages remotely...
CVE-2021-29654
AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data in the import database feature of the administration panel, leading to Remote Code execution...
CVE-2021-29654
AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data in the import database feature of the administration panel, leading to Remote Code execution...
Mozilla: Logic issue potentially leaves key material unlocked
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state. This vulnerability affects Thunderbird 78.8.1...
Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbi...