CVE-2021-3124

Stored cross-site scripting XSS in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars0name field...

CVE-2021-3124

Stored cross-site scripting XSS in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars0name field...

WordPress Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in WordPress 1.0.5 in Swapnil Subhash Bodekar can be exploited ...

Mercusys Mercury X18G Path Traversal Vulnerability

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A path traversal vulnerability exists in MERCUSYS Mercury X18G version 1.0.5, which stems from failing to properly filter for special elements in the path of a resource or file. An attacker could exploit the vulnerability by...

CVE-2021-23241

MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI for authentication bypass to the web server, as demonstrated by the /loginLess/../../etc/passwd URI...

Mercusys Mercury X18G 路径遍历漏洞

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A path traversal vulnerability exists in MERCUSYS Mercury X18G version 1.0.5, which stems from failing to properly filter for special elements in the path of a resource or file. An attacker could exploit the vulnerability by...

Security Bulletin: App Connect Enterprise Certified Container Dashboard is vulnerable to clickjacking (CVE-2020-4785)

Summary App Connect Enterprise Certified Container Dashboard is vulnerable to a clickjacking attack that may cause an information leak. Vulnerability Details CVEID: CVE-2020-4785 DESCRIPTION: IBM App Connect Enterprise Certified Container could allow a remote attacker to hijack the clicking actio...

GHSA-725F-3PW7-RQ6X Malicious Package in 8.9.4

Versions 1.0.2, 1.0.3, 1.0.4 and 1.0.5 of 8.9.4 contain malicious code as a preinstall script. The package reads the system's SSH keys but does not upload it to a remote server. Recommendation Remove the package from your environment. There is no evidence of further compromise at the moment...

Malicious Package in 8.9.4

Versions 1.0.2, 1.0.3, 1.0.4 and 1.0.5 of 8.9.4 contain malicious code as a preinstall script. The package reads the system's SSH keys but does not upload it to a remote server. Recommendation Remove the package from your environment. There is no evidence of further compromise at the moment...

GHSA-J5JC-JF8F-86Q7 Malicious Package in dictum.js

Version 1.0.5 of dictum.js contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.5 of this module is found installed you will...

Logic Flaw Vulnerability in ColossusCoinXt

ColossusCoinXT is an open source, community-driven, environmentally friendly cryptocurrency and alternative to Bitcoin with better anonymity.An input validation vulnerability exists in ColossusCoinXT version 1.0.5 and earlier, which stems from a networked system or product that does not properly...

CVE-2020-4282

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205...

UBUNTU-CVE-2019-18936

UniValue::read in UniValue before 1.0.5 allow attackers to cause a denial of service the class internal data reaches an inconsistent state via input data that triggers an error...

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

Artifex Software An unspecified vulnerability exists in Artifex MuJS.

Artifex Software Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software that is used to embed into other software to provide script execution capabilities. A security vulnerability exists in Artifex MuJS version 1.0.5, which stems from a regcompx in the regexp.c file that does...

Design/Logic Flaw

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without OEXCL...

PT-2019-11718 · Jenkins · Jenkins Aqua Microscanner Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Aqua MicroScanner Plugin versions 1.0.5 and earlier Description: The issue concerns the storage of credentials in the Jenkins Aqua MicroScanner Plugin. Specifically, the plugin stored credentials unencrypted in its global configuratio...

Artifex MuJS Buffer Overflow Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A buffer overflow vulnerability exists in Artifex Software MuJS version 1.0.5. The vulnerability arises when a network...

Artifex Software MuJS Resource Management Error Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A resource management error vulnerability exists in Artifex Software MuJS version 1.0.5. The vulnerability stems from...

Artifex MuJS Stack Buffer Overflow Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A stack buffer overflow based vulnerability exists in the NumbertoFixed function and numtostr function of the jscompile.c...