8 matches found
CVE-2020-36178
oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...
CVE-2024-36178
Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-36178 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2021-36178
creationtimestamp| type| source ---|---|--- 2021-10-06 14:37:54+00:00| seen| https://t.me/cibsecurity/30032...
CVE-2021-36178
CVE-2021-36178 affects Fortinet FortiSDNConnector (versions 1.1.7 and earlier). The root cause is insufficient protection of credentials, enabling an attacker with low privileges and network access to disclose third‑party device credentials by performing a configuration page lookup in the WebUI. ...
CVE-2020-36178
creationtimestamp| type| source ---|---|--- 2021-01-07 00:39:41+00:00| seen| https://t.me/cibsecurity/21723 2021-01-09 12:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2459...
CVE-2020-36178
oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...
CVE-2020-36178
Summary of CVE-2020-36178 : The vulnerability affects TP-Link TL-WR840N devices running 6_EU_0.9.1_4.16 firmware. The issue is caused by the function oal_ipt_addBridgeIsolationRules, where a raw string entered via the web interface (an IP address field) is used directly as input to a system call ...