386 matches found
CVE-2022-42141
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42140
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...
CVE-2022-42141
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
Command injection
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...
Cross site scripting
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42141: Improper Neutralization of Input During Web Page Generation
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42140
Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...
CVE-2022-42141
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42140: Improper Neutralization of Special Elements used in an OS Command
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...
PT-2022-6344 · Delta Electronics · Dx-2100-L1-Cn
Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the lform/net diagnose component of the Delta Electronics DX-2100-L1-CN...
PT-2022-26281 · Delta Electronics · Delta Electronics Dx-2100-L1-Cn
Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue is related to Cross Site Scripting XSS via lform/urlfilter. This means that an attacker could potentially inject malicious scripts into the website, allowing them to steal us...
CVE-2022-42141
CVE-2022-42141 affects Delta Electronics DX-2100-L1-CN (v2.42); the issue is Cross Site Scripting (XSS) via the lform/urlfilter component. The available sources confirm XSS without details on a fixed version. The Red Hat and NVD records consistently describe a CXSS vulnerability with medium overa...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS
CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...
Code injection
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T...
PT-2022-5655 · Moxa · Moxa Aig-300 +10
Name of the Vulnerable Software and Affected Versions: Moxa UC-8100A-ME-T System Image versions v1.0 to v1.6 Moxa UC-2100 System Image versions v1.0 to v1.12 Moxa UC-2100-W System Image versions v1.0 to v1.12 Moxa UC-3100 System Image versions v1.0 to v1.6 Moxa UC-5100 System Image versions v1.0 ...
CVE-2022-2100
creationtimestamp| type| source ---|---|--- 2022-07-17 14:28:00+00:00| seen| https://t.me/cibsecurity/46400...
CVE-2022-2100
The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-2100
The CVE-2022-2100 entry concerns the WordPress Page Generator plugin (versions before 1.6.5). Affected component: plugin settings sanitization/escaping, which lets high-privilege users (e.g., admin) trigger cross-site scripting. Root cause: failure to sanitize/escape settings. Impact: stored XSS ...
heilbronn-2100.de Cross Site Scripting vulnerability OBB-2518328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2015-2100
CVE-2015-2100 concerns stack-based buffer overflows in WebGate WebGate eDVR Manager and Control Center components, specifically the WESPDiscovery.WESPDiscoveryCtrl.1 ActiveX control’s TCPDiscovery and TCPDiscovery2 paths. The flaw allows remote code execution and is characterized by overflows in ...