66 matches found
SUSE CVE-2017-5650
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data. These waiting streams each...
CVE-2020-5650
creationtimestamp| type| source ---|---|--- 2020-10-21 20:51:14+00:00| seen| https://t.me/cibsecurity/15497...
CVE-2020-5650
CVE-2020-5650 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Simple Download Monitor (versions ≤ 3.8.8). The issue allows remote attackers to inject arbitrary scripts via unspecified vectors, potentially affecting the logged-in user’s browser. Multiple connected sources con...
JVN#31425618: Multiple vulnerabilities in WordPress Plugin "Simple Download Monitor"
WordPress Plugin "Simple Download Monitor" provided by Tips and Tricks HQ contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5650 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
CVE-2019-5650
CVE-2019-5650 is rejected/not used; this entry does not represent an active vulnerability.
Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2017-5647, CVE-2017-5650)
Summary Previous releases of IBM UrbanCode Deploy are affected by multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVE-ID: CVE-2017-5647 Description: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the failure to properly enforce security...
AirTies Air 5650 Cross-Site Scripting Vulnerability
AirTies Air 5650 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5650. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...
CVE-2018-17589
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17589
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
Design/Logic Flaw
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17589
The CVE-2018-17589 entry concerns AirTies Air 5650 devices running software 1.0.0.18 that are vulnerable to a Cross‑Site Scripting (XSS) flaw in the top.html page via the productboardtype parameter. The vulnerability target is the AirTies Air 5650 router; root cause is unencoded user input reflec...
CVE-2018-17589
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
Airties AIR5650 1.0.0.18 Cross Site Scripting
Exploit Title: Airties AIR5650 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Debian / Windows 10 CVE : CVE-2018-17589 A cross si...
CVE-2018-5650
In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...
CVE-2018-5650
In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...
CVE-2018-5650
In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...
Fedora 26 : 1:tomcat (2017-0e64c4c186)
This updates includes a rebase from tomcat 8.0.42 up to 8.0.43 which resolves multiple CVEs : - rhbz1441242 CVE-2017-5647 CVE-2017-5648 CVE-2017-5650 CVE-2017-5651 tomcat: various flaws Note that Tenable Network Security has extracted the preceding description block directly from the Fedora updat...
Fedora Update for tomcat FEDORA-2017-d5aa7c77d6
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : 1:tomcat (2017-d5aa7c77d6)
This updates includes a rebase from tomcat 8.0.42 up to 8.0.43 which resolves multiple CVEs : - rhbz1441242 CVE-2017-5647 CVE-2017-5648 CVE-2017-5650 CVE-2017-5651 tomcat: various flaws Note that Tenable Network Security has extracted the preceding description block directly from the Fedora updat...