Synacor Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-13201)

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor Zimbra Collaboration versions prior to 8.6.0 patch5. The vulnerability stems from a...

CVE-2020-3156

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could...

Cross site scripting

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could...

CVE-2020-3156 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could...

SilverStripe Cross-Site Scripting Vulnerability (CNVD-2020-10132)

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.4.5 before version 4.5.x and 4.5.2 before version 4.5.x cross-site...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS. The attack exists because the user input in 'getValidKey' function is not properly validated allowing an attacker to inject malicious scripts...

WordPress Ninja Forms Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ninja Forms plugin is a form creation component used in it. A cross-site scripting vulnerability exists in WordPress Ninja Forms versio...

Codoforum cross-site scripting vulnerability (CNVD-2020-14697)

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 4.8.8. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side...

WordPress Elementor Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. elementor is a drag-and-drop page builder plugin used in it. A cross-site scripting vulnerability exists in the WordPress Elementor...

Wowza Streaming Engine Cross-Site Scripting Vulnerability (CNVD-2020-07223)

Wowza Streaming Engine is a streaming media server software from Wowza Media Systems. The program supports live streaming, VOD, online video chat, and remote recording. A cross-site scripting vulnerability exists in Wowza Streaming Engine. The vulnerability stems from a lack of proper validation ...

Git Input Validation Error Vulnerability

Git is a free, open source distributed version control system. An input validation error vulnerability exists in Git. The vulnerability originates from a network system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

Cisco IOS XR Software Cisco Discovery Protocol Remote Code Execution Vulnerability (cisco-sa-20200205-iosxr-cdp-rce)

According to its self-reported version, the Cisco IOS XR Software is affected by a remote code execution vulnerability within the Cisco Discovery Protocol due to improper validation of string input. An unauthenticated, adjacent attacker can exploit this to bypass authentication and execute...

SOS JobScheduler JOC Cockpit Cross-Site Scripting Vulnerability

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in the JOC Cockpit component in SOS JobScheduler versions 1.11 and 1.13.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploi...

Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability (cisco-sa-20200205-nxos-cdp-rce)

According to its self-reported version, the Cisco NX-OS System Software is affected by a remote code execution vulnerability within the Cisco Discovery Protocol due to improper validation of input. An unauthenticated, adjacent attacker can exploit this to bypass authentication and execute arbitra...

CVE-2019-14046

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

Input validation

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

CVE-2019-14046

CVE-2019-14046 is a Qualcomm/Snapdragon vulnerability described as an out-of-bounds memory allocation during camera parameter validation across Snapdragon Auto, Compute, and related chips (QCS605, SDM439, SDX24). Connected sources (NVD/NVD family, Red Hat advisory, CVE listings, and Android bulle...

Nextcloud Server < 12.0.8, < 13.0.3 Improper Input Vulnerability (NC-SA-2018-003)

Nextcloud Server is prone to an improper input vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2020-04345)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack. The vulnerability stems...

Input validation

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this...