CVE-2018-17938

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

PT-2018-14286

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.10 GA Description The issue allows text content spoofing via a loginErrorCode value. Recommendations For versions prior to 8.8.10 GA, update to version 8.8.10 GA or later to resolve the issue...

CVE-2018-17938: Insufficient Verification of Data Authenticity

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

Null pointer dereference

CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer...