CWE:

	Topic	Date	Author
Med.	Landesk Management Suite 9.5 RFI / CSRF	21.04.2015	Alex Haynes

---

CVEMAP Search Results

CVE

Details

Description

2021-03-12

Low

CVE-2021-28162

Vendor: Eclipse Software: Theia

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

2021-02-18

Medium

CVE-2021-20443

Updating...

IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619.

2021-01-26

Low	CVE-2021-26272	Vendor: Ckeditor Software: Ckeditor	It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).
Low	CVE-2021-26271	Vendor: Ckeditor Software: Ckeditor	It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

2020-08-11

Medium

CVE-2020-13175

Vendor: Teradici Software: Cloud access...

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.

2020-04-01

Medium

CVE-2020-10865

Updating...

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process.

2020-01-29

Medium

CVE-2013-3321

Vendor: Netapp Software: Oncommand sy...

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.

2020-01-28

Low

CVE-2013-4582

Vendor: Gitlab Software: Gitlab

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.

2020-01-22

Medium

CVE-2012-4919

Vendor: Gallery project Software: Gallery

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

2020-01-08

Low

CVE-2019-17014

Vendor: Mozilla Software: Firefox

If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox < 71.

 

---

Copyright 2021, cxsecurity.com