CVE-2020-15937

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack XSS via the IPS and WAF logs dashboard...

CVE-2019-15937

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreply in net/nfs.c because a length field is directly used for a memcpy...

CVE-2020-15937

creationtimestamp| type| source ---|---|--- 2021-03-03 18:45:33+00:00| seen| https://t.me/cibsecurity/24392...

CVE-2020-15937

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack XSS via the IPS and WAF logs dashboard...

CVE-2020-15937

Fortinet FortiGate devices running FortiOS 6.2.x before 6.2.5 and 6.4.x before 6.4.1 are vulnerable to a stored cross‑site scripting (XSS) via the IPS/WAF logs dashboard caused by improper input neutralization. A remote attacker could exploit this via the logs dashboard. The connected documents p...

CVE-2019-15937

Pengutronix barebox up to 2019.08.1 is affected by a remote buffer overflow in nfs_readlink_reply (net/nfs.c) caused by a length field being used directly in a memcpy. Affected product: Pengutronix barebox; vulnerable component: net/nfs.c (nfs_readlink_reply). The CVE details report a high-severi...

CVE-2018-15937

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15937

CVE-2018-15937 affects Adobe Acrobat and Reader, specifically versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier. The issue is an untrusted pointer dereference that could lead to arbitrary code execution upon exploitation. The provided sources identify...

CVE-2017-15937

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...