CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2019-12427

CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.

CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-15313

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

CVE-2019-12427: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

PT-2020-11337

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to a persistent XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (registration form & user profile)

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...

PT-2020-9188

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.12 Patch 1 Description The issue is related to persistent XSS. Recommendations For versions prior to 8.8.12 Patch 1, update to version 8.8.12 Patch 1 or later to resolve the issue...

CVE-2019-11318: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CarSpot < 2.2.3 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'CarSpot – Dealership Wordpress Classified Theme', tested version — v2.2.0: - Authenticated Persistent XSS - Registration Form/User Profile - Authenticated Persistent XSS - Ad Post - IDOR leading to arbitrary deletion of ads Edit WPScanTeam: January...

CVE-2019-8947: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

CVE-2019-8945: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8946: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-15313: Improper Neutralization of Input During Web Page Generation

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

PT-2020-11339

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to non-persistent XSS. Recommendations For versions 8.7.x through 8.8.11P2, at the moment, there is no information about a newer version that contains a fix...

CVE-2012-6613

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

Design/Logic Flaw

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

CVE-2012-6613

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

CVE-2012-6613: Undefined Security Weakness

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

GHSA-GP2M-7CFP-H6GF Incorrect persistent NameID generation in SimpleSAMLphp

Background When a SimpleSAMLphp Identity Provider is misconfigured, a bug in the software when trying to build a persistent NameID to univocally identify the authenticating subject could cause different users to get the same identifier generated, depending on the attributes available for them rig...