Design/Logic Flaw

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SansCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SUSE-SU-2018:1988-1 Security update for wireshark

This update for wireshark fixes vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files bsc1094301. This includes: - CVE-2018-11356: DNS dissector cras...

CVE-2018-0709

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

CVE-2018-0708

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

q-wiki.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-648012 Description| Value ---|--- Affected Website:| q-wiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

q-bank.eu XSS vulnerability

Open Bug Bounty ID: OBB-647421 Description| Value ---|--- Affected Website:| q-bank.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Remote Code Execution (RCE)

opentsdb is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary commands through a q request using the o, key, style, yrange , y2range parameters and the JSON input...

CVE-2018-12972

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...

CVE-2018-12972

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...

CVE-2018-12973

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI...

CVE-2018-12973

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI...

CVE-2018-12972

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...

OpenTSDB Remote Command Execution Vulnerability

OpenTSDB is a set of open source, scalable distributed time series database. A remote command execution vulnerability exists in OpenTSDB version 2.3.0. An attacker can exploit this vulnerability by sending multiple parameters e.g., o, key, style, yrange, or y2range to the /q URI to execute comman...

q-lab.com XSS vulnerability

Open Bug Bounty ID: OBB-638147 Description| Value ---|--- Affected Website:| q-lab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

revistaevidencia.com.br XSS vulnerability

Open Bug Bounty ID: OBB-635491 Description| Value ---|--- Affected Website:| revistaevidencia.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11371)

PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the...

Sql injection

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

Debian DSA-4217-1 : wireshark - security update

It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc...