8345 matches found
The vulnerability of the vlc_input_attachment_New component in the VLC Media Player software allows a hacker to gain access to confidential data and also cause a service failure.
The vulnerability of the vlcinputattachmentNew component in the VLC Media Player software is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a speciall...
Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Popup Maker Create Popup Popup Settings Triggers Add New Cookie Add Cookie...
remotesupport.newhaven.edu Cross Site Scripting vulnerability OBB-2496847
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Kimai 安全漏洞
Kimai is an open source, web-based, multi-user time tracking application. A security vulnerability exists in Kimai 2 1.14, which is caused by the description in the new timetable...
Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel
...
The Forecast Is Flipped: Flipping L&D in New Hire Training
Rapid7’s onboarding program, Making the Band, first came to the stage in the fall of 2017 when the original 2-week, video-based program evolved into a dynamic 90-day experience. The updated program delivered learnings to new hires through digital self-paced content and a 2-day live training focus...
Denial Of Service (DoS)
mediawiki is vulnerable to denial of service DoS attacks. NewFiles on a wiki with many file uploads with actor as a condition leads to denial of service conditions...
CVE-2021-41752
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt function...
CVE-2021-41752
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt function...
Battling Cybersecurity Risk: How to Start Somewhere, Right Now
Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there's rarely been a more dangerous cybersecurity environment. It's a danger that affects every organization – automated attack campaigns don't discriminate between targets. The situation is...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript that stems from an infinite recursive call to the new opt function...
PT-2022-11476 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript versions prior to commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 Description: The issue is caused by an unbounded recursive call to the new opt function, leading to a stack overflow. This occurs in Jerryscript before the specifie...
CVE-2021-32953
An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...
CVE-2022-26565
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...
Cross site scripting
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...
CVE-2021-43505
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
CVE-2021-43505
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
CVE-2021-43505
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
CVE-2021-43505
CVE-2021-43505 affects Ssourcecodester Simple Client Management System v1. The vulnerability is described as multiple Cross-Site Scripting (XSS) issues exploitable via adding a new client or adding a new invoice. The connected documents confirm XSS in this product/version combination; no explicit...
