5859 matches found
Input validation
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure? Power Monitoring Expert 9.0 and prior versions...
CVE-2021-22827
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...
CVE-2021-22827
CVE-2021-22827 corresponds to an improper input validation (CWE-20) vulnerability in EcoStruxure Power Monitoring Expert 9.0 and earlier. Red Hat entries corroborate that this flaw could lead to arbitrary code execution when a user visits a page containing the injected payload; this CVE is distin...
CVE-2021-22826
The connected Red Hat entries confirm CVE-2021-22826 is an input-validation flaw (CWE-20) in EcoStruxure Power Monitoring Expert 9.0 and earlier. The vulnerability allows arbitrary code execution when a user visits a page containing the injected payload. The issue is tied to CVE-2021-22827 as a s...
CVE-2021-22826
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...
CVE-2021-44795
creationtimestamp| type| source ---|---|--- 2022-01-27 16:20:34+00:00| seen| https://t.me/cibsecurity/36378...
Reolink RLC-410W cgiserver.cgi command parser denial of service vulnerability
Summary A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested...
GLSA-202105-20 : Dnsmasq: DNS cache poisoning
The remote host is affected by the vulnerability described in GLSA-202105-20 Dnsmasq: DNS cache poisoning It was discovered that Dnsmasq, when configured with --server=@ or similar e.g. through dbus, configured a fixed UDP port for all outgoing queries to the specified upstream DNS server. Impact...
webmail.imam.com.br Cross Site Scripting vulnerability OBB-2342111
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
webmail.tradeceratti.com.br Cross Site Scripting vulnerability OBB-2342023
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-46061
creationtimestamp| type| source ---|---|--- 2022-01-20 22:11:59+00:00| seen| https://t.me/cibsecurity/35947...
webmail.cachacaprazerdeminas.com.br Cross Site Scripting vulnerability OBB-2341832
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
webmail.indusplan.com.br Cross Site Scripting vulnerability OBB-2341713
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-44737
creationtimestamp| type| source ---|---|--- 2022-01-20 20:12:04+00:00| seen| https://t.me/cibsecurity/35942...
CVE-2021-44091
creationtimestamp| type| source ---|---|--- 2022-01-20 20:11:58+00:00| seen| https://t.me/cibsecurity/35938...
CVE-2021-44735
creationtimestamp| type| source ---|---|--- 2022-01-20 20:11:56+00:00| seen| https://t.me/cibsecurity/35936 2023-07-24 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8723 2023-07-27 07:27:15+00:00| published-proof-of-concept| https://t.me/dilagrafie/3128...
CVE-2021-44738
creationtimestamp| type| source ---|---|--- 2022-01-20 18:23:25+00:00| seen| https://t.me/cibsecurity/35927...
jira.ogurki.com Cross Site Scripting vulnerability OBB-2341427
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...