20967 matches found
CVE-2020-21054
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...
CVE-2020-21054
FusionPBX 4.5.7 contains a Cross-Site Scripting (XSS) vulnerability exploitable via an unsanitized variable f in app/vars/vars_textarea.php. Affects multiple CVE mirrors (CVE-2020-21054) with consistent description across NVD, Red Hat, CNVD and other feeds. Impact is to inject arbitrary web scrip...
CVE-2020-21054: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...
PT-2021-10577
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7 Description: A Cross Site Scripting XSS issue allows remote malicious users to inject arbitrary web script or HTML via an unsanitized f variable in the appvarsvars textarea.php file. This enables attackers to execute...
NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery Vulnerability
NiceHash Miner Excavator versions 1.6.7c and below suffer from a cross site request forgery vulnerability. The issue enables any external web site to send commands to the local miner instance, and to redirect the mined coins to an arbitrary mining address. NiceHash Miner Excavator API Cross-Site...
NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery
NiceHash Miner Excavator API Cross-Site Request Forgery ======================================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/nicehash-miner-excavator-api-csrf.txt Overview -------- NiceHash Miner Excavator plugin contains a...
PT-2021-10304
Name of the Vulnerable Software and Affected Versions: PHPOK version 5.2.060 Description: A Cross Site Request Forgery CSRF issue exists, which could allow a remote malicious user to execute arbitrary code via the "admin.php?c=admin&f=save" API endpoint, specifically through the c and f parameter...
CVE-2020-19199: Cross-Site Request Forgery (CSRF)
A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...
CVE-2020-28016
Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...
CVE-2020-28016: Out-of-bounds Write
Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...
Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability
A vulnerability in the Java Management Extensions JMX component of Cisco Hosted Collaboration Mediation Fulfillment HCM-F could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An...
Privilege escalation
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...
CVE-2021-28271: Incorrect Default Permissions
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...
PT-2021-17837
Name of the Vulnerable Software and Affected Versions: Soyal Technologies SOYAL 701Server version 9.0.1 Description: The issue is related to an elevation of privileges that can be exploited by an authenticated user to change the executable file with a binary choice. This is due to improper...
Diego F. Aranha relic input validation error vulnerability
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2020-08-01, which stems from an invalid RSA PKCS.No detailed vulnerability details are provided ...
Unspecified vulnerability in the Diego F. Aranha relic
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...
Diego F.Aranha relic 安全漏洞
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...
Weak Password Vulnerability in HUAWEI Secoway USG2110-F
Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in HUAWEI Secoway USG2110-F. An attacker can exploit the vulnerability to obtain sensitive information...
