5100 matches found
CVE-2020-20142
The provided connected sources confirm CVE-2020-20142 affects Flexmonster Pivot Table & Charts 2.7.17, specifically the "+To Remote CSV" component under the Open menu. The root cause is a reflected XSS due to insufficient input sanitization of the 'path' parameter when fetching file specification...
Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability
Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in Flexmonster Pivot Table & Charts 2.7.17, which originates in the Remote JSON component Under the Conne...
Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability
Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in Flexmonster Pivot Table & Charts 2.7.17, which originates in the "To Remote CSV" component under the...
Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability
Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in the Connect menu in Flexmonster Pivot Table & Charts 2.7.17, which originates in the OLAP XMLA compone...
CVE-2020-20142: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table & Charts 2.7.17...
Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability
Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in Flexmonster Pivot Table & Charts 2.7.17, which originates in the Remote Report component under the Ope...
PT-2020-15238
Name of the Vulnerable Software and Affected Versions Flexmonster Pivot Table & Charts version 2.7.17 Description The issue is related to a Cross Site Scripting XSS vulnerability in the Remote Report component under the Open menu. This type of vulnerability allows attackers to inject malicious...
CVE-2020-29240
Lepton-CMS 4.7.0 is affected by cross-site scripting XSS. An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered...
CVE-2020-29240
Lepton-CMS 4.7.0 is affected by cross-site scripting XSS. An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered...
CVE-2020-29240: Improper Neutralization of Input During Web Page Generation
Lepton-CMS 4.7.0 is affected by cross-site scripting XSS. An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered...
PT-2020-17117
Name of the Vulnerable Software and Affected Versions Lepton-CMS version 4.7.0 Description The issue is related to cross-site scripting XSS, where an attacker can inject an XSS payload in the URL field of the admin page. This XSS will be triggered each time an admin visits the Menu-Pages-Pages...
MGASA-2020-0400 Updated webmin package fixes security vulnerabilities
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. CVE-2020-8820 An...
openSUSE Security Update : opera (openSUSE-2020-1713)
This update for opera fixes the following issues : opera was updated to version 71.0.3770.228 - DNA-87466 Hide extensions icon is black in dark theme - DNA-88580 Implement searchintabs telemetry benchmark - DNA-88591 Allow to scroll down the Keyboards Shortcuts section with URL - DNA-88693 Random...
CVE-2020-8821
An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered however, JavaScript is...
CVE-2020-8821: Improper Neutralization of Input During Web Page Generation
An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered however, JavaScript is...
PT-2020-20304
Name of the Vulnerable Software and Affected Versions Webmin versions 1.941 and earlier Description The issue is related to improper data validation in the Command Shell Endpoint, allowing a user to enter HTML code into the Command field. After submitting the code and visiting the Action Logs Men...
Application shortcuts still remain on the Start Menu when the application is already unassigned for the user
Workspace App has been configured with the option "Show Applications in Start Menu" and published apps appear on the start menu. When an application is removed from being assigned to a user, its shortcut still shows up on the users start menu...
WordPress Menu Swapper plugin <= 1.1.0.2 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Menu Swapper plugin versions = 1.1.0.2. Solution Update the WordPress Menu Swapper plugin to the latest available version at least 1.1.1...
