CVE-2020-1708

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...

CVE-2008-7314

mIRC before 6.35 allows attackers to cause a denial of service crash via a long nickname...

CVE-2008-7314

mIRC before 6.35 allows attackers to cause a denial of service crash via a long nickname...

CVE-2008-7314: Uncontrolled Resource Consumption

mIRC before 6.35 allows attackers to cause a denial of service crash via a long nickname...

PT-2020-7057

Name of the Vulnerable Software and Affected Versions mIRC versions prior to 6.35 Description The issue allows attackers to cause a denial of service, resulting in a crash, by utilizing a long nickname. Recommendations For versions prior to 6.35, update to version 6.35 or later to resolve the iss...

CVE-2015-7874

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

CVE-2015-7874: Buffer Copy without Checking Size of Input

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

PT-2020-7897

Name of the Vulnerable Software and Affected Versions: KiTTY Portable versions 0.65.0.2p and earlier Description: A buffer overflow issue in the chat server of KiTTY Portable allows remote attackers to execute arbitrary code via a long nickname. Recommendations: For KiTTY Portable versions...

Cross site scripting

A Cross-site scripting XSS vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22...

PT-2019-6926

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22 Description A Cross-site scripting XSS issue exists in the Conversation Overview Nickname. Recommendations For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue...

CVE-2013-4106: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22...

CVE-2013-2258

Cryptocat before 2.0.22 has Nickname User Impersonation...

CVE-2013-2258

CVE-2013-2258 affects Cryptocat before 2.0.22, described consistently across multiple connected records as allowing Nickname User Impersonation . The available documents identify the affected product and the basic vulnerability class but do not provide detailed root cause, affected components, ex...

CVE-2013-2258: Undefined Security Weakness

Cryptocat before 2.0.22 has Nickname User Impersonation...

Cross-Site Scripting XSS Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS suffers from a cross-site scripting XSS vulnerability, which can be exploited by an attacker to...

CVE-2018-16251

A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...

CVE-2018-16251: Improper Neutralization of Special Elements used in an SQL Command

A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...

PT-2019-9285

Name of the Vulnerable Software and Affected Versions Creatiwity wityCMS version 0.6.2 Description A search for user discovery injection issue exists, allowing unfiltered input parameters. Specifically, the issue is accessible via the "Utilisateur" menu, affecting parameters such as Nickname,...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

PT-2019-9391

Name of the Vulnerable Software and Affected Versions ZRLOG version 2.0.1 Description A Stored XSS issue was found in the nickname field of the comment area, allowing for potential malicious script execution. Recommendations For ZRLOG version 2.0.1, consider disabling the comment area or...