CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

Cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028

CVE-2015-10028 concerns the ss15-this-is-sparta project, specifically the Main Page component’s file js/roomElement.js . The available documents describe a cross-site scripting (XSS) vulnerability arising from manipulation of that file, with exploitation described as remote. The patch identified ...

CVE-2015-10023 Fumon trello-octometric srv.go main sql injection

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

Pear Programming 跨站脚本漏洞

Pear Programming is a project developed into a global hackathon by the individual developer Mauricio Soares. Pear Programming suffers from a cross-site scripting vulnerability that stems from an issue with unknown code in the js/roomElement.js file in the component Main Page, which can lead to...

PT-2023-10202 · Unknown · Fumon Trello-Octometric

Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...

PT-2023-10207 · Unknown · Ss15-This-Is-Sparta

Name of the Vulnerable Software and Affected Versions: ss15-this-is-sparta affected versions not specified Description: A vulnerability has been found in the component Main Page, specifically affecting the file js/roomElement.js. The manipulation leads to cross site scripting. The attack can be...

aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

PT-2023-10106 · Unknown · Drybjed Ansible-Ntp

Name of the Vulnerable Software and Affected Versions: drybjed ansible-ntp affected versions not specified Description: A problematic vulnerability has been found in drybjed ansible-ntp, affecting some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control...

PT-2022-7787 · Unknown · Valtech Idp Test Client +1

Name of the Vulnerable Software and Affected Versions: valtech IDP Test Client affected versions not specified Description: A vulnerability was found in the valtech IDP Test Client, classified as problematic, and affects some unknown functionality of the file python-flask/main.py. The manipulatio...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. FlatPress is vulnerable to a cross-site scripting vulnerability that stems from some unknown processing issues in the component Setupsetup/lib/main.lib.php file that can lead to...

PT-2022-9020 · Unknown · Destiny.Gg Chat

Name of the Vulnerable Software and Affected Versions: destiny.gg chat affected versions not specified Description: A vulnerability was found in the destiny.gg chat, affecting the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery, and the attack...

CVE-2022-3186

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2022-2814)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-38126 In gcc, an...

NewStart CGSL CORE 5.04 / MAIN 5.04 : python Multiple Vulnerabilities (NS-SA-2022-0102)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python packages installed that are affected by multiple vulnerabilities: - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

NewStart CGSL MAIN 6.02 : rsyslog Vulnerability (NS-SA-2022-0105)

The remote NewStart CGSL host, running version MAIN 6.02, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can...

NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2022-0104)

The remote NewStart CGSL host, running version MAIN 6.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 - In libxml2 before 2.9.14, several buffer handling functions ...

NewStart CGSL CORE 5.04 / MAIN 5.04 : rsyslog Vulnerability (NS-SA-2022-0103)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...