2836 matches found
CVE-2016-11013: Improper Neutralization of Input During Web Page Generation
The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS...
PT-2019-20100
Name of the Vulnerable Software and Affected Versions Opera versions prior to 63.0.3368.88 Description The issue concerns several problems fixed in an Opera update, including a crash at views::MenuController::FindNextSelectableMenuItem, issues with continuous packages using new mac bundle...
CVE-2019-10395
Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties...
CVE-2019-11464
Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and...
PT-2019-12324
Name of the Vulnerable Software and Affected Versions Couchbase Server versions 5.1.2 through 5.5.0 Description The issue concerns the absence of certain security-related headers in REST responses from the Couchbase Server Views REST API. Specifically, headers such as X-Frame-Options,...
CVE-2019-11464: Improper Neutralization of Input During Web Page Generation
Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and...
CVE-2019-14679: Cross-Site Request Forgery (CSRF)
core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...
Schben Adive Privilege Control Vulnerability
Schben Adive is a PHP-based web development framework . A security vulnerability exists in the Internal/Views/addUsers.php file in Schben Adive version 2.0.7. A remote attacker can exploit this vulnerability to create administrator privileges with admin/user/add...
CVE-2019-14346
CVE-2019-14346 affects Schben Adive 2.0.7. The vulnerability is a Cross-Site Request Forgery in Internal/Views/config.php that allows an admin/config CSRF to change a user password due to insufficient validation of request origin. Root cause stated as Web application not adequately validating tru...
CVE-2019-14346: Cross-Site Request Forgery (CSRF)
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...
PT-2019-13625
Name of the Vulnerable Software and Affected Versions Schben Adive version 2.0.7 Description The issue allows for admin/config CSRF, enabling an attacker to change a user's password. This is possible due to a vulnerability in the Internal/Views/config.php file. Recommendations For Schben Adive...
CVE-2019-14347: Direct Request
Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users editor or developer to create an administrator account via admin/user/add, as demonstrated by a Python PoC script...
PT-2019-11756 · Jenkins · Jenkins Maven Release Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Maven Release Plugin versions 0.14.0 and earlier Description: A stored cross site scripting issue allows attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins. Variables on affected views are no...
Stored XSS vulnerability in m2release
m2release did not properly escape variables in multiple views, resulting in a stored cross-site scripting vulnerability. Variables on affected views are now escaped...
Improper Access Control
stapler web framework is vulnerable to Improper Access Control. The UI views are frequently comprised of several view fragments, enabling plugins to extend existing views with more content. This vulnerability allows an attacker to directly access a view fragment containing sensitive information,...
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...
Update for Windows Server 2008 SP2: June 20, 2019
Update for Windows Server 2008 SP2: June 20, 2019 Summary This update for Windows Server 2008 SP2 includes the quality improvements from KB4503287 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detected an error in a snap-in and...
Update for Windows 8.1 and Windows Server 2012 R2: June 20, 2019
Update for Windows 8.1 and Windows Server 2012 R2: June 20, 2019 Summary This update for Windows 8.1 and Windows Server 2012 R2 includes the quality improvements from KB4503290 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detect...