CVE-2015-5952

Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter...

CVE-2015-5952: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter...

PT-2020-7872

Name of the Vulnerable Software and Affected Versions: Thomson Reuters for FATCA versions prior to 5.2 Description: The issue allows remote attackers to execute arbitrary files. This is achieved via the item parameter. Recommendations: For versions prior to 5.2, update to version 5.2 or later to...

jenkins: Stored XSS vulnerability in queue item tooltip

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executor...

CVE-2013-1642

Multiple cross-site scripting XSS vulnerabilities in QuiXplorer before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 dir, 2 item, 3 order, 4 searchitem, 5 selitems, or 6 srt parameter to index.php or 7 the QUERYSTRING to index.php...

PT-2020-7367

Name of the Vulnerable Software and Affected Versions: QuiXplorer versions prior to 2.5.5 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters to index.php, including the dir, item, order, searchitem, selitems, or srt parameter, as well as t...

DEBIAN-CVE-2019-20165

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...

UBUNTU-CVE-2019-20165

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...

GPAC Code Issue Vulnerability

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'ilstitemRead' function of the isomedia/boxcodeapple.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for ...

PT-2019-16110 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A NULL pointer dereference issue was found in the function ilst item Read in the file isomedia/box code apple.c. This issue can cause problems when the function is called...

Infosysta In-App&Desktop Notification for Jira Authentication Bypass Vulnerability

Infosysta In-App&Desktop Notification for Jira is an email notification plugin for the Jira defect tracking management system from Infosysta Lebanon. An authentication bypass vulnerability exists in Infosysta In-App&Desktop Notification for Jira version 1.6.13J8, which can be exploited by an...

CVE-2018-14613

An issue was discovered in the btrfs filesystem code in the Linux kernel. An invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image is due to a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c function. This could lead to a...

PT-2019-7420

Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to a SQL injection vulnerability via the item id parameter in the afp get new portfolio item page function. This allows for potential exploitation...

CVE-2007-6691

Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to 1 "hotlink protection" in the URL rewrite module, 2 a WebDAV view in the WebDAV module, 3 a comment view in the Comment module, 4 unspecified "item information disclosure attacks" in the Core modu...

CVE-2019-6774

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

FreeBSD : jenkins -- multiple vulnerabilities (9720bb39-f82a-402f-9fe4-e2c875bdda83)

Jenkins Security Advisory : DescriptionMedium SECURITY-1498 / CVE-2019-10401 Stored XSS vulnerability in expandable textbox form control Medium SECURITY-1525 / CVE-2019-10402 XSS vulnerability in combobox form control Medium SECURITY-1537 1 / CVE-2019-10403 Stored XSS vulnerability in SCM tag...

CVE-2019-10404

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executor...

CSRF vulnerability and missing permission check in project-inheritance

project-inheritance allows the creation of projects based on templates defined in the plugin configuration. A missing permission check in the HTTP endpoint triggering project creation allowed users with Overall/Read permission to create these projects. Additionally, the HTTP endpoint did not...

PT-2019-14613

Name of the Vulnerable Software and Affected Versions insert-php aka Woody ad snippets plugin versions prior to 2.2.8 Description The issue allows authenticated XSS via the winp item parameter. Recommendations For versions prior to 2.2.8, update to version 2.2.8 or later to resolve the issue. As ...

Limesurvey Menu Item Access Vulnerability

limesurvey is an open source online questionnaire program with many functions such as questionnaire design, modification, release, recovery and statistics. A menu item access vulnerability exists in Limesurvey versions prior to 3.17.14. An attacker can use this vulnerability to view, update, or...