142 matches found
CVE-2020-22200
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...
PT-2021-10744
Name of the Vulnerable Software and Affected Versions phpCMS version 9.1.13 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the q parameter to the "public get suggest keyword" endpoint. Recommendations For phpCMS version 9.1.13, consider restrictin...
Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities
Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage C:\ Watson.exe / / /\ \ \ | | \ / / / | / |/ | ' \ \ /\ / | |...
de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.19.12)
org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2020-7020 Source advisor...
de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.19.11)
org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2020-7020 Source advisor...
PT-2020-22391
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions such as...
keyword-suggest-tool.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1030626 Security Researcher Trarz Helped patch 8 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting keyword-suggest-tool.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...
UBUNTU-CVE-2019-16707
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx...
SQL Injection in extension "comsolit Suggest" (comsolit_suggest)
The extension fails to properly sanitize user input and is susceptible to SQL Injection...
keyword-suggest-tool.com XSS vulnerability
Open Bug Bounty ID: OBB-677603 Description| Value ---|--- Affected Website:| keyword-suggest-tool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross-Site Scripting (XSS)
opentsdb is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the type parameter with the /suggest URI...
OpenTSDB cross-site scripting vulnerability (CNVD-2018-13554)
OpenTSDB is a set of open source, scalable distributed time series database. A cross-site scripting vulnerability exists in OpenTSDB version 2.3.0. A remote attacker can exploit this vulnerability by sending the 'type' parameter to the /suggest URI to inject arbitrary Web script or HTML...
CVE-2018-13003
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...
Design/Logic Flaw
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...
CVE-2018-13003
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...
CVE-2018-13003
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...
CVE-2018-13003: Improper Neutralization of Input During Web Page Generation
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...
PT-2018-11532 · Opentsdb · Opentsdb
Name of the Vulnerable Software and Affected Versions: OpenTSDB version 2.3.0 Description: An issue was discovered in OpenTSDB, where there is a Cross-Site Scripting XSS vulnerability in the type parameter to the "/suggest" URI. This allows for potential malicious script execution. Recommendation...
brm-suggest-0.brsrvr.com XSS vulnerability
Open Bug Bounty ID: OBB-610633 Description| Value ---|--- Affected Website:| brm-suggest-0.brsrvr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
UBUNTU-CVE-2016-1927
The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach...