CVE-2021-4431

The CVE-2021-4431 issue affects msyk FMDataAPI up to version 22, specifically FMDataAPI_Sample.php, where an unknown function manipulation leads to Cross-Site Scripting (XSS). The vulnerability can be exploited remotely, and upgrading to version 23 addresses the issue (patch 3bd1709a8f7b1720529bf...

Kernel: race when faulting a device private page in memory manager

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to...

CVE-2019-25156

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

Cross site scripting

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

CVE-2019-25156

CVE-2019-25156 affects dstar2018 Agency versions up to 61. The vulnerability is in the unknown functionality of the file search.php, where manipulating the argument QSType/QuickSearch enables cross-site scripting. The attack can be launched remotely. A patch is provided (hash: 975b56953efabb43451...

CVE-2019-25156 dstar2018 Agency search.php cross site scripting

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

Design/Logic Flaw

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...

CVE-2021-4430

CVE-2021-4430 affects Ortus Solutions ColdBox Elixir 3.1.6, specifically the ENV Variable Handler’s file src/defaultConfig.js, leading to information disclosure. A fix is available in ColdBox Elixir 3.1.7; the patch is identified as a3aa62daea2e44c76d08d1eac63768cd928cd69e, per the vulnerability ...

CVE-2021-4430 Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...

CVE-2018-25093

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The...

CVE-2018-25093

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The...

CVE-2018-25093

The CVE-2018-25093 entry concerns Vaerys‑Dawn DiscordSailv2 (up to 2.10.2) with a Tag Handler component vulnerability that causes improper access controls. Connected sources specify the root cause as an access‑control issue in the Tag Handler, and recommend upgrading to version 2.10.3. The patch ...

CVE-2018-25093 Vaerys-Dawn DiscordSailv2 Tag access control

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The...

CVE-2018-25093 Vaerys-Dawn DiscordSailv2 Tag access control

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The...

CVE-2017-20187

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

CVE-2018-25092

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to...

Improper access control

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to...

CVE-2018-25092 Vaerys-Dawn DiscordSailv2 Command Mention access control

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to...

CVE-2017-20187 Magnesium-PHP Base.php formatEmailString injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

CVE-2017-20187

Magnesium-PHP prior to 0.3.1 is affected by CVE-2017-20187. The issue resides in the function formatEmailString in src/Magnesium/Message/Base.php, where manipulation of the arguments email/name leads to injection. A fix is available in version 0.3.1 (patch 500d340e1f6421007413cc08a8383475221c2604...