CVE-2017-20042

creationtimestamp| type| source ---|---|--- 2022-06-13 12:17:55+00:00| seen| https://t.me/cibsecurity/44257...

CVE-2017-20045

creationtimestamp| type| source ---|---|--- 2022-06-13 12:17:55+00:00| seen| https://t.me/cibsecurity/44258...

CVE-2017-20044

creationtimestamp| type| source ---|---|--- 2022-06-13 12:17:46+00:00| seen| https://t.me/cibsecurity/44251...

CVE-2017-20041

creationtimestamp| type| source ---|---|--- 2022-06-13 12:17:37+00:00| seen| https://t.me/cibsecurity/44244...

CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...

CVE-2017-20045 Navetti PricePoint cross-site request forgery

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

CVE-2017-20045

CVE-2017-20045 affects Navetti PricePoint 4.6.0.0. The issue is described as a cross-site request forgery affecting unknown code, with remote initiation possible. Multiple connected sources corroborate that upgrading to version 4.7.0.0 addresses the issue. The CVE notes the exploit has been discl...

CVE-2017-20044 Navetti PricePoint Reflected cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue...

CVE-2017-20044

CVE-2017-20044 affects Navetti PricePoint 4.6.0.0. The connected sources describe a basic cross-site scripting (Reflected) vulnerability that can be initiated remotely. Upgrading to version 4.7.0.0 addresses the issue. Affected component details and exact root cause are not elaborated beyond “unk...

CVE-2017-20043 Navetti PricePoint Persistent cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting Persistent. The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this...

CVE-2017-20043 Navetti PricePoint Persistent cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting Persistent. The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this...

CVE-2017-20043

CVE-2017-20043 affects Navetti PricePoint 4.6.0.0, where a basic cross-site scripting (Persistent) vulnerability exists in an unknown functionality. The issue can be exploited remotely, with remediation provided by upgrading to Navetti PricePoint 4.7.0.0. The public records consistently describe ...

CVE-2017-20042

The vulnerability affects Navetti PricePoint 4.6.0.0 . It arises from an issue in an unknown functionality that enables blind SQL injection , which can be exploited remotely. The issue is addressed by upgrading to 4.7.0.0 ; applying this version is the recommended remediation.

CVE-2017-20041 Ucweb UC Browser HTML URL improper restriction of rendered ui layers

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...

CVE-2017-20041

UC Browser 11.2.5.932 is affected by CVE-2017-20041 due to the HTML Handler: manipulation of the title argument leads to improper restriction of rendered UI layers (URL). The issue is exploitable remotely and the exploit has been disclosed publicly. No patch/version remediation details are provid...

CVE-2017-20040

The CVE-2017-20040 entry concerns SICUNET Access Controller 0.32-05z, specifically the Password Storage component. The vulnerability is described as enabling weak encryption due to manipulation of password storage, with exploitation requiring local access. No explicit exploit details, affected ve...

CVE-2017-20039

The CVE-2017-20039 entry refers to SICUNET Access Controller 0.32-05z. Affected component: system’s authentication mechanism; root cause: weak authentication that can be triggered remotely. Impact: high risk due to remote exploit potential and partial confidentiality/integrity/availability impact...

CVE-2017-20039 SICUNET Access Controller hard-coded password

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

CVE-2017-20038

SICUNET Access Controller 0.32-05z contains a vulnerability in card_scan_decoder.php where manipulating the No/door parameter leads to privilege escalation. The attack may be launched remotely, giving an attacker network-accessed, unauthorized privilege elevation with partial confidentiality/inte...

CVE-2017-20037 SICUNET Access Controller privileges management

A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely...