CVE-2020-14926

CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page...

recette-simple-rapide.net Cross Site Scripting vulnerability OBB-1201521

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-0145

In btmsimplepaircomplete of btmsec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

UBUNTU-CVE-2020-13848

Portable UPnP SDK aka libupnp 1.12.1 and earlier allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c...

Cisco IOS and IOS XE Code Issue Vulnerabilities

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A code issue vulnerability exists in the Simple Network Management Protocol SNMP subsystem of the IOS Software and IOS XE Software in the Cisco Catalyst 4500 Series, which arises from a program that do...

Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM Code Issue Vulnerability

The Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM is a 920 Series Aggregation Services Router from Cisco. A code issue vulnerability exists in the Simple Network Management Protocol SNMP implementation in the Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM, which...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input...

[SECURITY] Fedora 31 Update: perl-Email-MIME-1.949-1.fc31

This is an extension of the Email::Simple module, to handle MIME encoded messages. It takes a message as a string, splits it up into its constituent parts, and allows you access to various parts of the message. Headers are decoded from MIME encoding...

CMS Made Simple <= 2.2.14 Multiple XSS Vulnerabilities

CMS Made Simple is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-31089)

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made...

CVE-2020-13660

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...

CVE-2020-13660

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...

Cross site scripting

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...

CVE-2020-13660

CVE-2020-13660 concerns CMS Made Simple up to version 2.2.14, where an XSS vulnerability exists in the File Picker profile name. The connected sources consistently describe a cross-site scripting issue stemming from insufficient input/validation handling in the web application, enabling crafted p...

CVE-2020-13660

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...

WordPress simple-file-list plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-file-list is a file list plugin that supports opening and downloading files. A path traversal vulnerability exists in WordPress...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

Input validation

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...