S-cart 跨站脚本漏洞

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform from the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from a lack of detection of client-side input in the search function of the admin dashboard in...

Apple iOS Security Vulnerability

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple Apple. A security vulnerability exists in Apple iOS 12, where unauthorized code execution may result in a violation of authentication policies. The following products and versions are affected: iPho...

RHEL 8 : libpq (RHSA-2020:5401)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5401 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. The following...

NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0093)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially...

KB4592504: Windows Server 2008 December 2020 Security Update

The remote Windows host is missing security update 4592504 or cumulative update 4592498. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098 C Tenable Network...

Denial Of Service (DoS)

thunderbird is vulnerable to denial of service DoS. The vulnerability exists when processing a crafted S/MIME message or an XPI package containing a crafted signature...

S/MIME Message Takeover

thunderbird is vulnerable to S/MIME Message Takeover Attacks. A malicious S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature despite the signer having no access to the contents of the encrypted message...

Security update for neomutt (moderate)

openSUSE Security Update: Security update for neomutt Announcement ID: openSUSE-SU-2020:2158-1 Rating: moderate References: 1172906 1172935 1173197 1179035 1179113 Cross-References: CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 CVE-2020-28896 Affected Products: openSUSE Backports SLE-15-SP2 An...

Cross-site Scripting (XSS)

Overview s-cart/core is a free Laravel e-commerce for business. Affected versions of this package are vulnerable to Cross-site Scripting XSS. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS. PoC:...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-70785)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-70786)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-69448)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-69447)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

gbase 8s database suffers from a local lift vulnerability (CNVD-2020-68762)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database suffers from a local power lifting vulnerability, which can be exploited by an attacker to gain control of the server...

gbase 8s database suffers from a local lift vulnerability (CNVD-2020-68761)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database suffers from a local power lifting vulnerability, which can be exploited by an attacker to gain control of the server...

Cross-site Scripting (XSS) - Generic in s-cart/core

Description s-cart is a free e-commerce website project for businesses, built on the Laravel framework. this package is vulnerable to Stored Cross-Site Scripting XSS. https://github.com/s-cart/s-cart https://s-cart.org/about.html Steps To Reproduce-: 1 install https://github.com/s-cart/s-cart...

Debian: Security Advisory (DLA-2462-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: nss-3.58.0-3.fc31

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 32 Update: nss-3.58.0-3.fc32

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...