CVE-2013-4158

smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...

Design/Logic Flaw

smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...

CVE-2013-4158

smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...

CVE-2013-4158

smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...

CVE-2013-4158

smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...

CVE-2013-4158

CVE-2013-4158 affects Smokeping prior to 2.6.9 . Root cause: XSS in the web interface (incomplete fix for CVE-2012-0790). Impact: potential for client-side code execution via the web UI. Affected products/versions are documented in multiple sources; remediation : upgrade to Smokeping 2.6.9 or new...

Shopify: Timeline Editor Self-XSS (Previous Fix #738072 Incomplete)

1.Consistent steps 2.poc: axxx 3. F656339 Impact admin...

ALPINE-CVE-2019-19579

An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device and assignable-add is not used, because of an incomplete fix for CVE-2019-18424. XSA-302 relies on the use of libxl's...

CVE-2019-19579

An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device and assignable-add is not used, because of an incomplete fix for CVE-2019-18424. XSA-302 relies on the use of libxl's...

CVE-2012-4526

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

Design/Logic Flaw

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

CVE-2012-4526

Piwigo is affected by a cross-site scripting (XSS) vulnerability in password.php. This entry (CVE-2012-4526) indicates an incomplete fix for CVE-2012-4525, with XSS described in the same file and linked citations. The provided documents do not specify affected versions, exploit status, in-the-wil...

CVE-2012-4526

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

Cisco IOS XE Software, Catalyst, and NGWC GUI Privilege Escalation (cisco-sa-20170927-ngwc)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the web-based Wireless Controller GUI for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless...

CVE-2019-16254

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients...

CVE-2011-4924

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

CVE-2011-4924

CVE-2011-4924 is a Zope XSS vulnerability: multiple Zope 2.x branches (2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, as well as 3.1.1–3.4.1) allow remote attackers to inject arbitrary web script or HTML via error-message sanitizat...

CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...

CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...

Directory traversal

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...