314 matches found
OESA-2022-1521 tinyxml security update
TinyXML parses an XML document, and builds from that a Document Object Model DOM that can be read, modified, and saved. XML is a very structured and convenient format. All those random file formats created to store application data can all be replaced with XML. One parser for everything. Security...
Mageia: Security Advisory (MGASA-2016-0408)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
Denial of service
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...
UBUNTU-CVE-2021-42260
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...
TinyXML 安全漏洞
TinyXML is a C++ XML parser that can be easily integrated into other programs. An infinite loop vulnerability exists in TiXmlParsingData::Stamp in tinyxmlparser.cpp in TinyXML 2.6.2 and earlier. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted XML...
CVE-2021-30049
SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...
Sysaid Technologies SysAid 跨站脚本漏洞
Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...
CVE-2021-0454
creationtimestamp| type| source ---|---|--- 2021-03-10 20:53:15+00:00| seen| https://t.me/cibsecurity/24716...
CVE-2021-1301
creationtimestamp| type| source ---|---|--- 2021-01-20 22:27:29+00:00| seen| https://t.me/cibsecurity/22440...
CVE-2020-35509
A flaw was found in keycloak. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity...
Denial of Service Vulnerability in Time Stamp (Windows Client)
Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...
Denial of Service Vulnerability in Time Stamp (Windows Client) (CNVD-2020-75029)
Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...
postsrsd -- Denial of service vulnerability
postsrsd developer reports: PostSRSd could be tricked into consuming a lot of CPU time with an SRS address that has an excessively long time stamp tag...
stamp-style.de Cross Site Scripting vulnerability OBB-1484940
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
greekstampstore.com Cross Site Scripting vulnerability OBB-1206256
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
