CVE-2021-32924

Invision Community aka IPS Community Suite before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\builder::previewBlock method interacts unsafely with the IPS\Theme::runProcessFunction method...

CVE-2021-33558

Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not par...

May 20, 2021—KB5003212 (OS Build 18363.1593) Preview

None None...

File upload local preview can run embedded scripts after user interaction

Impact When uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file, but only after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely ...

GHSA-8796-GC9J-63RV File upload local preview can run embedded scripts after user interaction

Impact When uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file, but only after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely ...

CVE-2021-32622 File upload local preview can run embedded scripts after user interaction

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the previ...

CVE-2021-32622

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the previ...

vmd Cross-Site Scripting Vulnerabilities

vmd is a software application. Preview markdown files in a separate window A cross-site scripting vulnerability exists in vmd version 1.34.0 and earlier versions, which leaks div class="markdown-body"...

CVE-2021-32622: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the previ...

PT-2021-19814

Name of the Vulnerable Software and Affected Versions Matrix-React-SDK versions prior to 3.21.0 Description The issue arises when uploading a file, as the local file preview can lead to the execution of scripts embedded in the uploaded file. This occurs after several user interactions to open the...

JetBrains YouTrack Information Disclosure Vulnerability (CNVD-2021-34743)

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. An information disclosure vulnerability exists in the "Issue Preview" of JetBrains YouTrack versions prior to...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

Information disclosure

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

CVE-2021-31905 affects JetBrains YouTrack prior to 2020.6.8801, where the vulnerability enables information disclosure through the Issue Preview component. The issue is documented across multiple sources (NVD entry, Red Hat advisory, CNVD/CVE listings, and JetBrains security bulletin). Root cause...

PT-2021-19580

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2020.6.8801 Description: The issue concerns information disclosure in an issue preview. Recommendations: For versions prior to 2020.6.8801, update to version 2020.6.8801 or later to resolve the issue...

CVE-2021-31905: Undefined Security Weakness

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

JetBrains YouTrack information leakage vulnerability

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. An information disclosure vulnerability exists in the "Issue Preview" of JetBrains YouTrack versions prior to...