CVE-2026-8337

CVE-2026-8337 CVE-2026-8337 は、Concrete CMS の Survey 機能に影響を与える Insecure Direct Object Reference IDOR 脆弱性です。CVE-2026-8347（Express アソシエーションに関連）とは異なり、この脆弱性により、認証されていない攻撃者が特定のサイト構成下で制限付き/プライベートな調査に参加できる可能性があります。 概要 Concrete CMS 9.5.0 以前には、その調査機能に認可の欠陥が存在します。Web...

PT-2024-34363 · Zenml Io · Zenml

Name of the Vulnerable Software and Affected Versions: zenml-io/zenml version 0.57.1 Description: A reflected Cross-Site Scripting XSS issue exists due to improper neutralization of input during web page generation, specifically within the redirect parameter. This allows an attacker to redirect...

DEBIAN-CVE-2022-3306

Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

UBUNTU-CVE-2022-3305

Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2020-27852

A stored Cross-Site Scripting XSS vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role Administrator, Editor, etc...

PT-2021-11430

Name of the Vulnerable Software and Affected Versions: Rocketgenius Gravity Forms versions prior to 2.4.21 Description: A stored Cross-Site Scripting XSS vulnerability in the survey feature allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpret...

CVE-2020-27852: Improper Neutralization of Input During Web Page Generation

A stored Cross-Site Scripting XSS vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role Administrator, Editor, etc...

[SECURITY] Fedora 21 Update: drupal7-webform-4.7-1.fc21

Webform is the module for making surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review and has and...

CVE-2014-9646

Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/googlechromedistribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the...