988 matches found
Amazon Corretto Java 17.x < 17.0.7.7.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is prior to 17 17.0.7.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2023-Apr-18 advisory. - security-libs/javax.net.ssl CVE-2023-21930, CVE-2023-21967 - core-libs/java.net CVE-2023-21937 -...
CVE-2020-22533
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter...
CVE-2020-22533
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter...
Cross site scripting
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter...
CVE-2020-22533
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter...
CVE-2020-22533
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter...
Zentao 跨站脚本漏洞
Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management functions. ...
PT-2023-11621 · Zentao · Zentao
Name of the Vulnerable Software and Affected Versions: Zentao affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the lang parameter. This enables the attacker to inject malicious scripts into the website, potentially...
Security Bulletin: CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard
Summary Multiple CVEs CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVEs. Relevant Go related packages have been upgraded. Vulnerability Details CVEID:CVE-2022-27664 DESCRIPTION: Golang Go is...
Internet Bug Bounty: Ruby's CGI library has HTTP response splitting (HTTP header injection), leaking confidential information
A vulnerability was found in Ruby's CGI library that allowed an attacker to inject a malicious HTTP response header and/or body if an application used untrusted user input to generate HTTP responses. The vulnerability was fixed in version 0.3.5, 0.2.2, and 0.1.0.2 of the cgi gem...
SUSE CVE-2001-1350
Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...
SUSE CVE-2006-2031
Cross-site scripting XSS vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
SUSE CVE-2022-0813
PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pmaparameter, and the cookie section...
CVE-2022-0316 Multiple themes - Unauthenticated Arbitrary File Upload
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...
CVE-2015-10058
CVE-2015-10058 affects Wikisource Category Browser, with the vulnerability located in the index.php file. The issue stems from manipulation of the lang parameter, enabling cross-site scripting (XSS). It is described as exploitable remotely. A patch is identified as 764f4e8ce3f9242637df77530c70ae8...
PT-2023-10237 · Unknown · Wikisource Category Browser
Name of the Vulnerable Software and Affected Versions: Wikisource Category Browser affected versions not specified Description: A vulnerability was found in Wikisource Category Browser, affecting an unknown part of the file index.php. The manipulation of the lang argument leads to cross-site...
Wikisource Category Browser 跨站脚本漏洞
Wikisource Category Browser is a Wikisource open source application. Wikisource Category Browser suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter lang can lead to cross-site scripting...
webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...