CVE-2018-10201

CVE-2018-10201 affects NComputing vSpace Pro 10 and 11 via NcMonitorServer.exe (NC Monitor Server). A directory-traversal flaw allows remote attackers to read arbitrary files outside the web root by sending crafted URLs to TCP port 8667 (no credentials required). Supporting sources describe vulne...

CVE-2017-10201

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to...

CVE-2017-10201

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to...

CVE-2017-10201

The CVE-2017-10201 entry concerns Oracle Hospitality Applications, specifically the e7 component (subcomponent: Other), affected in version 4.2.1. The connected sources consistently describe a vulnerability that can be exploited by a low-privileged user who has logged into the infrastructure wher...

CVE-2016-10201

Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php...

CVE-2016-10201

ZoneMinder 1.30 and earlier is affected by CVE-2016-10201, a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php. The issue is confirmed across multiple vulnerability feeds (OSV/NVD) an...

CVE-2016-10201

Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php...