7160 matches found
CVE-2020-9439
Uncanny Owl Tin Canny LearnDash Reporting prior to 3.4.4 contains multiple XSS vulnerabilities exploitable by authenticated remote actors via several GET parameters (e.g., search_key in TinCan_Content_List_Table.php; licensing.php; tc_filter_* in reporting-admin-menu.php; tc_filter_data_range/ tc...
CVE-2020-9439
Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...
Uncanny Owl Tin Canny LearnDash Reporting Cross-Site Scripting Vulnerability
Uncanny Owl Tin Canny LearnDash Reporting is a plugin from Uncanny Owl Canada that provides learning record storage functionality for Wordpress. Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 has a security vulnerability that originates from the following script or parameter: searchkey GE...
The vulnerability of the apport operating system’s error registration service allows a hacker to escalate their privileges.
The vulnerability of the apport operating system’s error registration service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...
U.S. General Services Administration: Unauthorized access to employee panel with default credentials.
Summary: Hello, When hunting for your web application. I have managed to go https://cars.fas.gsa.gov/cars/cars and get displayed with a form. I have already tried to login to Cars and without success. However i've noticed the loginChk function and change the value of the form hence bypassing it a...
PT-2025-1352 · Ibm · Ibm Cognos Controller +1
Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller version 11.1.0 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This...
Security Bulletin: IBM Tivoli Common Reporting: TCR, a part of IBM Jazz for Service Management (JazzSM) is vulnerable to an information exposure vulnerability (CVE-2020-4643)
Summary WebSphere Application Server is vulnerable to an information exposure vulnerability. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Tivoli Common...
CVE-2020-17138
Windows Error Reporting Information Disclosure Vulnerability...
CVE-2020-17138
Windows Error Reporting Information Disclosure Vulnerability...
CVE-2020-17094
Windows Error Reporting Information Disclosure Vulnerability...
CVE-2020-17094
Windows Error Reporting Information Disclosure Vulnerability...
Information disclosure
Windows Error Reporting Information Disclosure Vulnerability...
Information disclosure
Windows Error Reporting Information Disclosure Vulnerability...
CVE-2020-17138 Windows Error Reporting Information Disclosure Vulnerability
...
CVE-2020-17138 Windows Error Reporting Information Disclosure Vulnerability
...
CVE-2020-17138
CVE-2020-17138 is a Windows Error Reporting vulnerability described as an Information Disclosure vulnerability. The connected KLA12024 entry states this vulnerability can be exploited remotely to obtain sensitive information, confirming a remote-exploitation information disclosure in the Windows ...
CVE-2020-17094 Windows Error Reporting Information Disclosure Vulnerability
...
CVE-2020-17094
CVE-2020-17094 is described as a Windows Error Reporting Information Disclosure Vulnerability. The connected sources provide a CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a Medium severity and High confidentiality impact, plus a CVSS2 base score of 5.5. The documents do not sp...
