CVE-2026-16970

creationtimestamp| type| source ---|---|--- 2026-07-30 14:19:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4xvtuild26bs4...

CVE-2019-16970

In FusionPBX up to 4.5.7, the file app\sipstatus\sipstatus.php uses an unsanitized "savemsg" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2020-16970

creationtimestamp| type| source ---|---|--- 2020-11-11 12:35:12+00:00| seen| https://t.me/cibsecurity/16157...

CVE-2020-16970

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16970

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16970

CVE-2020-16970 is a Microsoft Azure Sphere vulnerability involving the AF_AZSPIO socket path. The Talos analysis describes a memory-corruption flaw in the AF_AZSPIO socket flow that can trigger a double-free and out-of-bounds read in the kernel, potentially allowing shellcode execution and/or a d...

CVE-2020-16970 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2017-16970

...

CVE-2017-16970

CVE-2017-16970 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-16970

In FusionPBX up to 4.5.7, the file app\sipstatus\sipstatus.php uses an unsanitized "savemsg" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16970

FusionPBX (versions up to 4.5.7) contains a reflected XSS in app\sip_status\sip_status.php where an unsanitized URL parameter savemsg is echoed in HTML. The vulnerability arises from lack of input sanitization for the savemsg value sourced from the URL. Impact is client-side code execution within...

Wisetail Learning Ecosystem 4.11.6 Insecure Direct Object Reference

Title: MULTIPLE IDOR VUNLERABILITies ON WISETAIL LEARNING ECOSYSTEM LE UPTO V4.11.6 Date: 12/09/2019 Author: S. M. Zia Ur Rashid Vendor Homepage: wisetail.com Author Contact: https://www.linkedin.com/in/ziaurrashid/ Affected Version: = 4.11.6 Assaigned CVE: CVE-2018-16970, CVE-2018-16971...

CVE-2018-16970

Wisetail Learning Ecosystem LE through v4.11.6 allows insecure direct object reference IDOR attacks to download non-purchased course files via a modified id parameter...

CVE-2018-16970

CVE-2018-16970 affects Wisetail Learning Ecosystem (LE) up to version 4.11.6, where an insecure direct object reference (IDOR) enables downloading non-purchased course files by modifying the id parameter. The connected PacketStorm entry corroborates multiple IDOR vulnerabilities affecting LE ≤ 4....