175 matches found
PT-2021-7222
Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The vulnerability in the MCE Systems mobile device lifecycle management system's WebView component is related to the failure to neutralize special elements used in the operating system...
CVE-2020-8288
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
CVE-2020-8288
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
Rocket.Chat server 跨站脚本漏洞
Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in Rocket.Chat server versions prior to 3.9.2, which stems from the value parameter. No details of the vulnerability are available at this time...
PT-2021-12719
Name of the Vulnerable Software and Affected Versions: Rocket.Chat server versions prior to 3.9.2 Description: The issue concerns a cross-site scripting XSS vulnerability. It is related to the specializedRendering function and can be exploited through the value parameter. Recommendations: For...
CVE-2020-8288: Improper Neutralization of Input During Web Page Generation
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
Design/Logic Flaw
Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter...
CVE-2019-7356
Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter...
PT-2020-11244
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for XSS via the panel/phrases/ endpoint, specifically through the VALUE parameter. Recommendations For Subrion CMS version 4.2.1, update to a newer version that contains a fix for this iss...
KoreaShow Number Error Vulnerability
KoreaShow is a system for cryptocurrency trading. An integer overflow vulnerability exists in the 'transferMulti' function in the smart contract implementation of KoreaShow. The vulnerability can be exploited by an attacker to increase digital assets with the help of the 'value' parameter...
CVE-2019-20375: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...
Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability (CNVD-2020-14077)
ELOG is a web application written in C by Stefan Ritt that can be used to create personal and frequently used logs. A cross-site scripting vulnerability exists in Electronic Logbook ELOG 3.1.4. A remote attacker can exploit this vulnerability by injecting arbitrary web script or HTML into elogd.c...
PT-2020-10404
Name of the Vulnerable Software and Affected Versions ELOG version 3.1.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c. Recommendations For ELOG version 3.1.4, update to ...
CVE-2019-14343
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
CVE-2019-14343
CVE-2019-14343 affects TemaTres 3.0, with a stored XSS vulnerability in the parameter value of the vocab/admin.php?vocabulario_id=list endpoint. Multiple connected records confirm the vulnerability and describe client-side code execution potential. The root cause is a stored XSS flaw in the value...
PT-2019-13622
Name of the Vulnerable Software and Affected Versions TemaTres version 3.0 Description The issue is related to stored XSS, which occurs via the value parameter to the "vocab/admin.php?vocabulario id=list" URI. This allows for potential malicious script execution. Recommendations For TemaTres...
CVE-2019-14343: Improper Neutralization of Input During Web Page Generation
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
PT-2019-14040
Name of the Vulnerable Software and Affected Versions Terrasoft Bpm'online CRM-System SDK version 7.13 Description A SQL injection issue exists in the Terrasoft.Core.DB.Column.Const method, allowing attackers to execute arbitrary SQL commands via the value parameter. Recommendations For version...
CVE-2019-15301: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...