6 matches found
CVE-2025-14186
creationtimestamp| type| source ---|---|--- 2025-12-07 09:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7f6rsjzpi2s...
CVE-2025-14186 Grandstream GXP1625 Network Status api.values.post cross site scripting
A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...
CVE-2019-14186
CVE-2019-14186 is rejected/not used and does not represent an active vulnerability entry.
FortiGate SSL VPN Portal 5.x Cross Site Scripting Vulnerability
FortiGate SSL VPN Portal versions 5.6.2 and below, 5.4.6 and below, 5.2.12 and below, and 5.0 and below suffer from a cross site scripting vulnerability. ======================================================================= title: FortiGate SSL VPN Portal XSS Vulnerability product: Fortinet...
CVE-2017-14186
FortiGate FortiOS SSL VPN Web Portal is affected by CVE-2017-14186. A cross-site scripting (XSS) vulnerability exists because the login redir parameter is not sanitized, enabling a remote attacker to inject arbitrary script in a user’s browser within the FortiGate SSL VPN Web Portal context. A re...