vulnerabilities and exploits

(subscribe to this query)

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

Beego Beego 2.0.1

mm-wiki v0.2.1 exists to contain a cross-site scripting (XSS) vulnerability via the markdown editor.

Mm-wiki Project Mm-wiki 0.2.1

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.

Maianmedia Maianaffiliate 1.0

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigg...

Openexr Openexr 3.1.2 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Multiple Cross Site Scripting (XSS) vulnerabilities exists in PHPGurukul Shopping v3.1 via the (1) callback parameter in (a) server_side/scripts/id_jsonp.php, (b) server_side/scripts/jsonp.php, and (c) scripts/objects_jsonp.php, the (2) value parameter in examples_support/editabl...

Shopping Portal Project Shopping Portal 3.1

Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.

Hp Color Laserjet Cm4540 Mfp Cc419a Firmware Hp Color Laserjet Cm4540 Mfp Cc420a Firmware Hp Color Laserjet Cm4540 Mfp Cc421a Firmware Hp Color Laserjet Cm5525 Mfp Ce707a Firmware Hp Color Laserjet Cm5525 Mfp Ce708a Firmware Hp Color Laserjet Cm5525 Mfp Ce709a Firmware Hp Color Laserjet M578 Mfp 7zu85a Firmware Hp Color Laserjet M578 Mfp 7zu86a Firmware Hp Color Laserjet M578 Mfp 7zu87a Firmware Hp Color Laserjet M578 Mfp 7zu88a Firmware Hp Color Laserjet Enterprise Flow Mfp M880z D7p70a Firmware Hp Color Laserjet Enterprise Flow Mfp M880z A2w75a Firmware

A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload.

Seeddms Seeddms 6.0.15

Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote malicious users to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.

Eyoucms Eyoucms 1.5.4

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

Bookstackapp Bookstack

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook