org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.6.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:git 2.0.1 -...

Stored XSS vulnerability in uno-choice

uno-choice 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. uno-choice 2.5.7 escapes references to parameter names...

Stored XSS vulnerability in uno-choice

uno-choice 2.5.2 and earlier does not escape reference parameter values. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. uno-choice 2.5.3 escapes reference parameter values...

SQL Injection Vulnerability in the Website Building System of Shenyang Uno Network Technology Co.

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SQL Injection Vulnerability in Website Building System of Shenyang Uno Network Technology Co. Ltd (CNVD-2021-12681)

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SQL Injection Vulnerabilities in the Website Building System of Shenyang Uno Network Technology Co.

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SQL Injection Vulnerabilities in the Website Building System of Shenyang Uno Network Technology Co.

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SQL Injection Vulnerability in Website Building System of Shenyang Uno Network Technology Co. Ltd (CNVD-2021-12683)

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

CVE-2020-25538

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

PT-2020-16107

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2 Description An authenticated attacker can inject malicious code into the lang parameter in the "/uno/central.php" file and run this PHP code in the web page, potentially allowing the attacker to take control of the server...

Stored XSS vulnerability in uno-choice

uno-choice 2.4 and earlier does not escape List and Map return values of sandboxed scripts for Reactive Reference Parameter. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. This issue is caused by an incomplete fix for...

Stored XSS vulnerability in uno-choice

uno-choice 2.4 and earlier does not escape the name and description of build parameters. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. uno-choice 2.5 escapes the name of build parameters and applies the configured markup...

Moderate: Red Hat Security Advisory: unoconv security update

An update for unoconv is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libreoffice:fodtfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Detailed Report: https://oss-fuzz.com/testcase?key=5128563175718912 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: com::sun::star::uno::BaseReference::iquery...

libreoffice:ww6fuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5948909376765952 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

uno-caol-showten.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174317 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

libreoffice:xlsxfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5750470976208896 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Addres...

RCE in LibreOffice and OpenOffice via the Apache UNO API

LibreOffice and OpenOffice are vulnerable to RCE via the Apache UNO API if either program is running as a listener on the host machine. Recent assessments: space-r7 at September 12, 2019 6:07pm UTC reported: Details The soffice binary allows passing arguments in order to listen on a host ip and...

[SECURITY] Fedora 31 Update: mingw-hunspell-1.7.0-6.fc31

Hunspell is a spell checker and morphological analyzer library and program designed for languages with rich morphology and complex word compounding or character encoding. Hunspell interfaces: Ispell-like terminal interface usi ng Curses library, Ispell pipe interface, OpenOffice.org UNO module...

[SECURITY] Fedora 31 Update: hunspell-1.7.0-4.fc31

Hunspell is a spell checker and morphological analyzer library and program designed for languages with rich morphology and complex word compounding or character encoding. Hunspell interfaces: Ispell-like terminal interface usi ng Curses library, Ispell pipe interface, LibreOffice UNO module...