Cross site scripting

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643 WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The CVE-2021-24643 entry concerns the WordPress plugin WP Map Block (versions before 1.2.3). The root cause is insufficient escaping of certain attributes in the block, enabling Stored Cross-Site Scripting (XSS) when a user with a low privilege (contributor) interacts with the block (e.g., adding...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin WP Map Block, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

Code injection

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

CVE-2021-29856

Summary: CVE-2021-29856 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.x (8.1.0). An authenticated user can cause a denial of service via the WebGUI Map Creation page. Impact: availability HIGH (CVSS v3.1 base score 6.5; network, low attack complexity, low privileges required, no user interaction). R...

IBM Tivoli Netcool/OMNIbus_GUI 安全漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

SUSE-SU-2021:3125-1 Security update for gtk-vnc

This update for gtk-vnc fixes the following issues: - CVE-2017-5885: Correctly validate color map range indexes bsc1024268. - CVE-2017-5884: Fix bounds checking for RRE, hextile & copyrect encodings bsc1024266. - Fix crash when opening connection from a GSocketAddress bsc1046782. - Fix possible...

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

SolarWinds Orion Platform has an unspecified vulnerability (CNVD-2021-101209)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based views of the entire network. Code...

Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-101211)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

SolarWinds Orion Platform SQL Injection Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and profiling of network devices and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network. The...

CVE-2021-35239

A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...

CVE-2021-35239

A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...

CVE-2021-35239

CVE-2021-35239 describes a stored XSS vulnerability in SolarWinds Orion Platform, where a user with Orion map manage rights can store XSS via a text box hyperlink. Evidence across connected documents points to SolarWinds Orion Platform (pre- HF1 patch level 2020.2.6 HF1) as affected, caused by in...