CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-14208: Improper Neutralization of Input During Web Page Generation

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

PT-2020-13934 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.11.13 Description: The issue is related to stored Cross-Site Scripting XSS in the Documents preview functionality. This could allow remote authenticated attackers to inject arbitrary web script or HTML. Recommendations: For...

SuiteCRM cross-site scripting vulnerability

SuiteCRM is a free open source customer relationship management application. A stored cross-site scripting vulnerability exists in the Document Preview feature of SuiteCRM 7.11.13. A remote authenticated attacker can exploit this vulnerability to inject arbitrary web script or HTML...

KLA12009 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An...

CVE-2020-25706

A cross-site scripting XSS vulnerability exists in templatesimport.php Cacti 1.2.13 due to Improper escaping of error message during template import preview in the xmlpath field...

CVE-2020-25706: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in templatesimport.php Cacti 1.2.13 due to Improper escaping of error message during template import preview in the xmlpath field...

ILIAS Cross-Site Scripting Vulnerability (CNVD-2020-62481)

ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. A cross-site scripting vulnerability exists in the problematic library file upload preview feature in ILIAS 6.4. No detailed vulnerability details are provided at this time...

CVE-2020-25267

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

Cross site scripting

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

CVE-2020-25267

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

CVE-2020-25267: Improper Neutralization of Input During Web Page Generation

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

PT-2020-16051

Name of the Vulnerable Software and Affected Versions ILIAS version 6.4 Description An XSS issue exists in the question-pool file-upload preview feature. This allows for potential exploitation through malicious file uploads. Recommendations For ILIAS version 6.4, update to a version that includes...

Crash Reporter Utility for Citrix Virtual Apps and Desktops

About This Release This is an early technical preview release v1.0.0.2 of the Crash Reporter utility. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now...

Citrix preSCAN Tool

About This Release This is an early technical preview release v1.0.0.2 of the preSCAN tool. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now available ...

CVE-2020-26167

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...

CVE-2020-26167

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...

Design/Logic Flaw

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...

CVE-2020-26167

Summary: CVE-2020-26167 affects FUEL CMS up to version 11.4.12. The vulnerability arises in the page preview feature, enabling an anonymous user to take complete ownership of any account, including administrator ones. This is described consistently across multiple sources (NVD entry and Red Hat a...

CVE-2020-26167

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one...