Design/Logic Flaw

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...

CVE-2019-18641

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...

CVE-2019-18641

Rock RMS prior to 1.8.6 contains a vulnerability in the People/GetVCard/REST controller where vCard access is mishandled, potentially allowing unauthorized access to vCard data. The issue is tied to the access control logic for vCard retrieval and is documented across multiple sources as CVE-2019...

CVE-2019-18641: Undefined Security Weakness

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...

PT-2020-9978 · Rock Rms · Rock Rms

Name of the Vulnerable Software and Affected Versions: Rock RMS versions prior to 1.8.6 Description: The issue is related to mishandled vCard access control within the People/GetVCard/REST controller. This could potentially allow unauthorized access to sensitive information. Recommendations: For...

[SECURITY] Fedora 31 Update: php-horde-Horde-Data-2.1.5-1.fc31

A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...

[SECURITY] Fedora 30 Update: php-horde-Horde-Data-2.1.5-1.fc30

A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...

Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-1e7cc91d55)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-0248ad925e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

IceWarp 12.2.0 / 12.1.x Cross Site Scripting

Advisory: IceWarp: Cross-Site Scripting in Notes for Contacts During a penetration test, RedTeam Pentesting discovered that the IceWarp WebMail Server is prone to user-assisted cross-site scripting attacks in its contact module. If IceWarp users import a manipulated vcard, for example from an...

CVE-2019-15950

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data...

Cross site scripting

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data...

CVE-2019-15950

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data...

CVE-2019-15950

The CVE-2019-15950 vulnerability affects the Redmine CRM Plugin prior to version 4.2.4. The issue is an XSS vulnerability triggered by crafted vCard data uploaded to the plugin. According to the sources, affected software is the Redmine CRM Plugin for Redmine (before 4.2.4). Impact is XSS in the ...

CVE-2019-15950: Improper Neutralization of Input During Web Page Generation

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data...

Microsoft Windows VCF Files Remote Code Execution

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to improper processing of VCard files. Successful exploitation could lead to arbitrary code execution...

Unpatched vCard Flaw Could Let Attackers Hack Your Windows PCs

A zero-day vulnerability has been discovered and reported in the Microsoft's Windows operating system that, under a certain scenario, could allow a remote attacker to execute arbitrary code on Windows machine. Discovered by security researcher John Page @hyp3rlinx, the vulnerability was reported ...

Unpatched vCard Flaw Could Let Attackers Hack Your Windows PCs

A zero-day vulnerability has been discovered and reported in the Microsoft's Windows operating system that, under a certain scenario, could allow a remote attacker to execute arbitrary code on Windows machine. Discovered by security researcher John Page @hyp3rlinx, the vulnerability was reported ...

Microsoft Windows VCF - Remote Code Execution

Microsoft Windows VCF - Remote Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-VCF-FILE-INSUFFICIENT-WARNING-REMOTE-CODE-EXECUTION.txt + ISR: ApparitionSec + Zero Day Initiative Program...

Microsoft Windows VCF - Remote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-VCF-FILE-INSUFFICIENT-WARNING-REMOTE-CODE-EXECUTION.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product A VCF file is a...