Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation

Summary A stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Tax Zones are not properly sanitized before being displayed in the admin panel. Proof of Concept Requirments -...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30946)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3...

Unspecified Vulnerability in Oracle Solaris 'Kernel Zones'

Oracle Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability exists in the 'Kernel Zones' component of Oracle Solaris version 11.3. A local attacker can exploit the vulnerability to cause a denial of service. The availability of data is affected...

The vulnerability of the Solaris operating system, which allows a hacker to execute arbitrary code

The vulnerability of Solaris Kernel Zones, a subsystem of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability allows an attacker acting locally to execute arbitrary code...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0419...

The vulnerability of the Solaris operating system allows a intruder to gain unauthorized access for data reading purposes.

The vulnerability of Solaris Kernel Zones, a component of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to read data...