9589 matches found
Design/Logic Flaw
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
CVE-2021-28688
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
CVE-2021-28688
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
CVE-2021-28688
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
Cross site scripting
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
CVE-2021-30146 affects Seafile Server 7.0.5 (2019). The vulnerability is a Persistent XSS in the"share of library" feature, enabling malicious JavaScript execution. The attack path described in sources indicates an attacker with a local account can create a shared library containing injected scri...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
CVE-2021-30146
Removed by vendor...
Exploit for Cross-site Scripting in Seafile
CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested descri...
CVE-2021-28688: Improper Initialization
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
CVE-2021-30146: Improper Neutralization of Input During Web Page Generation
Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...
Spy Operations Target Vietnam with Sophisticated RAT
An advanced cyberespionage campaign targeting government and military entities in Vietnam has been discovered that delivered a remote-access tool RAT for carrying out espionage operations, researchers said. Further analysis suggested that this campaign was conducted by a group related to a...
CVE-2021-30109: Improper Neutralization of Input During Web Page Generation
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
Hackers are implanting multiple backdoors at industrial targets in Japan
Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan. Dubbed "A41APT" by Kaspersky researchers, the findings delve into a new slew of attac...