1100 matches found
Code injection
contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter...
CVE-2020-6756
languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows unauthenticated attackers to remotely execute code via the lang parameter...
CVE-2020-6756
CVE-2020-6756 affects Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version). The vulnerability is in languageOptions.php and allows unauthenticated remote code execution via the lang parameter. Connected sources confirm an RCE condition with this PHP file, affecting PixelStor 5000 K devices;...
CVE-2020-6758
The CVE-2020-6758 entry corresponds to a cross-site scripting (XSS) vulnerability in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version), specifically in Option/optionsAll.php, exploitable through the ContentFrame parameter. This is confirmed across multiple connected documents (Red Hat, C...
CVE-2020-6757
contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...
CVE-2019-6332
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
Cross site scripting
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
Rasilient PixelStor 5000 Remote Code Execution Vulnerability
The Rasilient PixelStor 5000 is a low-cost, high-bandwidth and high-availability RAID disk array. A remote code execution vulnerability exists in the contentHostProperties.php file in the Rasilient PixelStor 5000 K: 4.0.1580-20150629 KDI version release, which can be exploited by an attacker to...
PT-2020-19215
Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter. This can be exploited by sending malicious input to th...
PT-2020-19214
Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description The issue allows authenticated attackers to remotely execute code. This is achieved via the name parameter in the contentHostProperties.php file. Recommendations For version...
PT-2020-19213
Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description The issue allows unauthenticated attackers to remotely execute code. This is achieved via the lang parameter in the languageOptions.php file. Recommendations For version...
CVE-2020-6756: Improper Neutralization of Special Elements used in an OS Command
languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows unauthenticated attackers to remotely execute code via the lang parameter...
CVE-2020-6758: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter...
CVE-2020-6757: Improper Neutralization of Special Elements used in an OS Command
contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...
CVE-2019-20329
OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...
CVE-2019-20329
OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...
Code injection
OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...
CVE-2019-20329
OpenLambda (release 2019-09-10) contains a DNS rebinding vulnerability affecting the OL server hosting the REST API on TCP port 5000. The issue enables potential DNS rebinding attacks against the server as described in multiple sources linked to CVE-2019-20329. The concrete impact and available f...