Aptana Jaxer 1.0.3.4547 - Local File inclusion

Exploit Title: Aptana Jaxer Remote Local File inclusion Date: 8/8/2019 Exploit Author: Steph Jensen Vendor Homepage: http://www.jaxer.org Version: 1.0.3.4547 Tested on: Linux CVE : CVE-2019-14312 Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source...

Moderate: Red Hat Security Advisory: spice-gtk security and bug fix update

An update for spice-gtk, libgovirt, spice-vdagent, and virt-viewer is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

IBM Daeja ViewONE Virtual Code Issue Vulnerability

IBM Daeja ViewONE Virtual is an HTML5-based document and image viewer from IBM USA. The product is primarily used to view, annotate and print images and documents. A code issue vulnerability exists in IBM Daeja ViewONE Virtual. An attacker could exploit the vulnerability to disclose sensitive...

UBUNTU-CVE-2019-14291

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...

Aptana Jaxer wikilite source browser local file inclusion vulnerability

Aptana Jaxer is an open source JavaScript server . A local file inclusion vulnerability exists in the wikilite source viewer in Aptana Jaxer version 1.0.3.4547. A remote attacker can exploit this vulnerability with tools/sourceViewer/index.html?filename=... / URI to read internal files...

Rockstar Games: Image Injection vulnerability on screenshot-viewer/responsive/image may allow Facebook OAuth token theft.

In this report, the researcher identified a series of vulnerabilities that could be exploited together to exfiltrate sensitive user tokens. In this attack chain, one critical step was an image injection vulnerability in the Screenshot-Viewer function on the main site, at...

Foxit Reader < 9.6 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.6. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

CloudBees Jenkins Dependency Graph Viewer plugin cross-site scripting vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...

CVE-2019-10349

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

CVE-2019-10349

The CVE-2019-10349 issue affects Jenkins Dependency Graph View Plugin (≤0.13). The root cause is a stored XSS vulnerability in the plugin’s Configure module where the Display Name field can be exploited to inject arbitrary HTML/JavaScript into plugin-provided Jenkins pages. Impact per sources is ...

CVE-2019-10349

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

CVE-2019-10349

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

PT-2019-11748 · Jenkins · Jenkins Dependency Graph Viewer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dependency Graph Viewer Plugin versions 0.13 and earlier Description: A stored cross site scripting issue allows attackers who can configure jobs in Jenkins to inject arbitrary HTML and JavaScript into the plugin-provided web pages in...

CVE-2019-10349: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...

.NET SDK WebForm Viewer Disclosure

The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, includin...

Microsoft Windows Event Viewer XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Event...

FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34853)

FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...

FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34854)

FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...

FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34855)

FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...