10 matches found
CVE-2026-34274
A vulnerability (CVE-2026-34274) affects Oracle Configurator in Oracle E-Business Suite, specifically the UI component, for versions 12.2.3–12.2.15. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Configurator, with user interaction required. The im...
CVE-2023-43702
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
Cross site scripting
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43702 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2022-1436
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...
CVE-2022-1436
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...
Threat Outbreak Alert RuleID29121: Email Messages Distributing Malicious Software on May 15, 2017
Medium Alert ID: 53831 First Published: 2017 May 15 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29121 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID18269: Email Messages Distributing Malicious Software on September 25, 2015
Medium Alert ID: 41219 First Published: 2015 September 25 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18269 may contain the following files: Name ...
Threat Outbreak Alert RuleID14948: Email Messages Distributing Malicious Software on April 28, 2015
Medium Alert ID: 38554 First Published: 2015 April 28 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14948 may contain the following files: Name | Si...
U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...