SUSE CVE-2017-5938

Cross-site scripting XSS vulnerability in the navpath function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the navdata name...

CVE-2020-20340

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

Design/Logic Flaw

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

PT-2021-4107

Name of the Vulnerable Software and Affected Versions please versions prior to 0.4 Description The issue is related to the search path function and the --check option, -d of the please utility, which can lead to information disclosure in error messages. An attacker can exploit this to gain...

PT-2017-11758

Name of the Vulnerable Software and Affected Versions xar version 1.6.1 Description The issue is related to a NULL pointer dereference in the xar get path function, located in util.c of the libxar.so library in xar. Recommendations For xar version 1.6.1, at the moment, there is no information abo...

PT-2017-16772

Name of the Vulnerable Software and Affected Versions ViewVC versions prior to 1.0.14 ViewVC versions 1.1.x prior to 1.1.26 Description A cross-site scripting XSS issue exists in the nav path function in lib/viewvc.py, allowing remote attackers to inject arbitrary web script or HTML via the nav...

UBUNTU-CVE-2012-2922

The requestpath function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q parameter to index.php, which reveals the installation path in an error message...