Wordpress plugin FV Flowplayer cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin FV Flowplayer, which can be exploited by an attacker to...

PT-2018-13864

Name of the Vulnerable Software and Affected Versions K-Net Cisco Configuration Manager versions through 2014-11-19 Description The issue is related to a security problem where an attacker can execute malicious scripts on the device. This is achieved through the devices.php endpoint, which is...

Microsoft Windows: Script Execution

This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run. If you enable this policy setting, the scripts selected in the drop-down list are allowed to run. The Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpte...

Microsoft Windows: Turn on Script Execution

This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run. If you enable this policy setting, the scripts selected in the drop-down list are allowed to run. The SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpt...

SAP NetWeaver WebDynpro Java Cross-Site Scripting Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A cross-site scripting vulnerability exists in SAP NetWeaver, which arises from a failure to properly sanitize user-supplied input and can be exploited by a remote attacker to execute arbitrary script...

Cisco Tetration Analytics Cross-Site Scripting Vulnerability

Cisco Tetration Analytics is a hybrid cloud workload protection solution. The product features trust whitelisting, software vulnerability detection and network performance monitoring. A cross-site scripting vulnerability exists in the web-based management interface in Cisco Tetration Analytics,...

PT-2018-13676

Name of the Vulnerable Software and Affected Versions Gxlcms version 1.0 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the PATH INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php, allowing for the injection of...

@bndynet/bbootstrap (>=1.0.2, <=2.2.1), @bndynet/jslib (>=1.0.52, <=2.0.0) +8 more potentially affected by CVE-2018-16330 via editor.md (1.5.0)

editor.md NPM version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on editor.md and may be impacted: - @bndynet/bbootstrap =1.0.2, =1.0.52, =2.3.6, =1.0.0, =0.2.0, =0.1.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2018-16330 Source advisory:...

CVE-2018-0675

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0675

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

Design/Logic Flaw

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

Design/Logic Flaw

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

CVE-2018-0674 affects AttacheCase, a file‑encryption tool by HiBARA Software. Vulnerability: when a specially crafted AtcCase.ini is in the same folder as the ATC file, decryption can trigger execution of an arbitrary script, enabling a remote unauthenticated attacker to run code. Affected: Attac...

CVE-2018-0675

CVE-2018-0675 affects AttacheCase up to version 3.3.0.0 (and earlier). The vulnerability allows arbitrary script execution via crafted settings, specifically when a malicious ATCCase.ini is placed in the same folder as the ATC file and the file is decrypted. The root cause is tied to handling of ...

PT-2018-9006

Name of the Vulnerable Software and Affected Versions AttacheCase versions 3.3.0.0 and earlier Description The issue allows for arbitrary script execution via unspecified vectors. Recommendations For AttacheCase versions 3.3.0.0 and earlier, at the moment, there is no information about a newer...

CVE-2018-0674: Improper Control of Generation of Code

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0675: Improper Control of Generation of Code

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

PT-2018-9005

Name of the Vulnerable Software and Affected Versions AttacheCase versions 2.8.4.0 and earlier Description The issue allows for arbitrary script execution via unspecified vectors. Recommendations For AttacheCase versions 2.8.4.0 and earlier, at the moment, there is no information about a newer...