Cross site scripting

SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page...

CVE-2020-35856

SolarWinds Orion Platform ≤ 2020.2.4 is affected by CVE-2020-35856, a stored cross-site scripting (XSS) vulnerability that exists on the Customize View page and requires an Orion administrator account to exploit. The issue is associated with the add custom tab within the Customize View page, enab...

CVE-2020-35856

SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page...

Solarwinds Orion Platform 跨站脚本漏洞

SolarWinds Orion Platform is a comprehensive bandwidth performance management and fault management application that lets you view real-time statistics about your network directly from your Web browser. A stored cross-site scripting vulnerability exists in SolarWinds Orion Platform versions prior ...

[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34

Calendar is a simple and beautiful calendar application designed to fit GNOME 3. Features: Week, month and year views Basic editing of events Evolution Data Server integration Search support...

VMware View Planner 4.6 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware View Planner Unauthenticated Log File Upload RCE', 'Description' = %q This module exploits an unauthenticated log file upload within the...

VMware View Planner 4.6 Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated log file upload within the loguploadwsgi.py file of VMWare View Planner 4.6 prior to 4.6 Security Patch 1. Successful exploitation will result in remote code execution as the apache user inside the appacheServer Docker container. This module...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

Cybozu Office View Restriction Bypass Vulnerability (CNVD-2021-18058)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in the bulletin boards in Cybozu Office. An attacker can exploit this vulnerability to obtain bulletin board data without viewing privileges...

Cybozu Office View Restriction Bypass Vulnerability (CNVD-2021-18056)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in a custom application in Cybozu Office. An attacker can use this vulnerability to obtain data from a custom application without viewing privileges...

Cybozu Office View Restriction Bypass Vulnerability (CNVD-2021-18057)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in Cabinet in Cybozu Office. An attacker can exploit this vulnerability to obtain Cabinet data without viewing privileges...

Cybozu Office View Restriction Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in the phone messages in Cybozu Office. An attacker can exploit this vulnerability to obtain phone message data without viewing privileges...

Cybozu Office 授权问题漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in the bulletin boards in Cybozu Office. An attacker can exploit this vulnerability to obtain bulletin board data without viewing privileges...

Cybozu Office 授权问题漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in a custom application in Cybozu Office. An attacker can use this vulnerability to obtain data from a custom application without viewing privileges...

Cybozu Office 授权问题漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in the phone messages in Cybozu Office. An attacker can exploit this vulnerability to obtain phone message data without viewing privileges...

Cybozu Office 安全漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A view restriction bypass vulnerability exists in Cabinet in Cybozu Office. An attacker can exploit this vulnerability to obtain Cabinet data without viewing privileges...

The vulnerability of the `escape_javascript` function in the `javascript_helper.rb` component of the ActionView programming platform for Ruby on Rails allows attackers to compromise data integrity.

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

VMware View Planner Remote Code Execution (CVE-2021-21978)

A remote code execution vulnerability exists in VMware View Planner. The vulnerability is due to improper validation of HTTP request to logupload endpoint. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitatio...

MGASA-2021-0121 Updated postgresql packages fix security vulnerabilities

A user having an UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may be able to acquire denied-column values from an error message CVE-2021-3393. A user having a SELECT privilege on an individual column can craft a special query that returns all columns of...

Cross-site Scripting (XSS)

velocity-tools-view is vulnerable cross-site scripting XSS. An attacker is able to inject and execute malicious script in a user's browser as it does not escape a user-provided vm file as part of the URL which displayed in the error page...