15 matches found
CVE-2022-36502
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams...
CVE-2020-36502
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...
CVE-2024-36502
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2023-36502
creationtimestamp| type| source ---|---|--- 2023-07-25 18:26:55+00:00| seen| https://t.me/cibsecurity/67240...
CVE-2023-36502
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...
CVE-2023-36502 WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...
CVE-2023-36502
CVE-2023-36502: WordPress Balkon Theme
CVE-2023-36502 WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...
WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
Software Balkon Type Theme Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36502 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 90ca41d6439b Credits RE-ALTER Required privilege...
CVE-2022-36502
creationtimestamp| type| source ---|---|--- 2022-08-25 18:23:22+00:00| seen| https://t.me/cibsecurity/48719...
CVE-2022-36502
CVE-2022-36502 concerns the H3C Magic NX18 Plus NX18PV100R003 router, where a stack overflow in the function UpdateWanParams() is reported. The vulnerability is characterized by a local attack vector, low privileges required, and no user interaction, with potential impact to confidentiality, inte...
CVE-2022-36502
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams...
CVE-2020-36502
creationtimestamp| type| source ---|---|--- 2021-10-23 00:39:43+00:00| seen| https://t.me/cibsecurity/31072...
CVE-2020-36502
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...
CVE-2020-36502
CVE-2020-36502 describes an XSS vulnerability in Swift File Transfer Mobile v1.1.2, caused by the devicename parameter. The issue allows an attacker to inject and execute arbitrary web scripts or HTML when the device name is crafted, as indicated by multiple connected sources. Documented details ...