4 matches found
XSS/HTML Injection Vulnerability in Umbraco Preview Badge
Impact Authenticated users are able to exploit an XSS vulnerability when viewing previewed content. Patches Will be patched in 10.8.8, 13.5.3, 14.3.2 and 15.1.2. Workarounds None available...
CVE-2018-19556
zbsystem/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability...
CVE-2016-4749
Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...
PT-2016-6109
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Description The issue in Apple iOS allows local users to discover cleartext AirPrint preview content by reading a temporary file due to the mishandling of environment variables when printing UIKit. Recommendation...