10771 matches found
CVE-2018-19550
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveyssubmit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI...
CVE-2018-19468
HuCart 5.7.4 has SQL injection in getip in system/class/helperclass.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=actlogin URI...
Epic Games Launcher Protocol Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visual Studio with tools for Unreal Engine development installed. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
SRC-2019-0010 : Foxit Reader SDK ActiveX URI Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader SDK ActiveX Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
PT-2018-3320 · Tp Link · Tp-Link Tl-R600Vpn
Name of the Vulnerable Software and Affected Versions: TP-Link TL-R600VPN affected versions not specified Description: The issue is related to insufficient input validation in the URI parsing functionality of the TP-Link TL-R600VPN HTTP server. This can be exploited by a remote attacker to cause ...
Cross site scripting
kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI...
CVE-2018-19324
CVE-2018-19324 affects kimsQ Rb 2.3.0 and enables XSS via the second input field on the URI /?r=home&mod=mypage&page=info. The issue arises from improper handling of input in that page, allowing arbitrary script execution. Public references in multiple feeds (NVD, Red Hat, CVE listings) describe ...
CVE-2018-19324
kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI...
CVE-2018-19311
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
Design/Logic Flaw
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
CVE-2018-19311
Centreon 3.4.x is vulnerable to a cross-site scripting (XSS) flaw triggered via the Service field when accessing main.php?p=20201 (e.g., in Monitoring > Status Details > Services). The issue is fixed in Centreon 18.10.0. Affected component: the web UI Service field handling; root cause info...
CVE-2018-19312
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
CVE-2018-19311
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
CVE-2018-19291
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI...
DiliCMS Cross-Site Request Forgery Vulnerability
DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS 2.4.0 suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to delete a user or group via the admin/index.php/user/del/1 or admin/index.php/role/del/2 URIs...
uriparser UriCommon.c File Denial of Service Vulnerability
uriparser is a standard based on RFC 3986 URI parsing and processing library . A security vulnerability exists in the UriCommon.c file in uriparser versions prior to 0.9.0. An attacker can exploit this vulnerability to cause a denial of service with the 'uriResetUri' function...
uriparser integer overflow vulnerability
uriparser is a standard based on RFC 3986 URI parsing and processing library . A security vulnerability exists in the UriQuery.c file in uriparser version 0.9.0. An attacker can exploit this vulnerability to cause an integer overflow with the help of the 'uriComposeQuery' or 'uriComposeQueryEx'...
The vulnerability of the Omnibox component in the Chrome web browser allows a hacker to replace the URI address.
The vulnerability of the Omnibox component in the Chrome web browser is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the displayed URI address...
