CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

CVE-2020-7242

CVE-2020-7242 affects Comtech Stampede FX-1010, version 7.4.3. The issue allows remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and injecting shell metacharacters into the Target IP address field; in some cases authentication ...

Cross site scripting

Reflected Cross-Site Scripting XSS exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loanrules.php?keywords= URI, a related issue to CVE-2017-7242...

CVE-2018-12655

Reflected Cross-Site Scripting XSS exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loanrules.php?keywords= URI, a related issue to CVE-2017-7242...

CVE-2018-12655

Reflected Cross-Site Scripting XSS exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loanrules.php?keywords= URI, a related issue to CVE-2017-7242...

CVE-2018-7242

The CVE-2018-7242 issue affects Schneider Electric’s Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers (communication modules) across all versions. The root cause is a weak cryptographic practice in password encryption where the hash algorithm is vulnerable to hash collis...

CVE-2014-7242

CVE-2014-7242 affects Mitsui Sumitomo Insurance SumaHo apps on Android: SumaHo 3.0.0 and earlier and the SumaHo “driving capability” diagnosis result transmission app v1.2.2 and earlier. The root cause is failure to verify SSL/TLS server certificates, enabling MITM attackers to spoof servers and ...

CVE-2017-7242

CVE-2017-7242 is an XSS vulnerability in SLiMS 7 Cendana affecting multiple admin/modules components. The described flaws involve unsafely handling user-supplied input in the keywords parameter across several scripts (bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.ph...

CVE-2016-7242

Affected software: Chakra JavaScript engine (ChakraCore) used by Microsoft Edge. Vulnerability type/impact: memory corruption that can allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Root cause/notes: described in the CVE as a memory-corruptio...

Microsoft Edge CVE-2016-7242 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. This could allow the attacker to execute arbitrary code in the context of the currently logged-in user. Failed...

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)

A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

CVE-2015-7242

Cross-site scripting XSS vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message...

CVE-2015-7242

AVM FRITZ!OS

Zenphoto SQL注入漏洞

CVE ID:CVE-2013-7242 Zenphoto是Zenphoto团队开发的一套免费的图片库内容管理系统。该系统可管理图片，且支持音频、视频等多媒体。 Zenphoto zp-core/zp-extensions/wordpressimport.php脚本中存在SQL注入漏洞。远程攻击者可借助特制的‘tableprefix’参数利用该漏洞执行任意SQL命令。 0 Zenphoto = 1.4.5.3 厂商补丁： Zenphoto ----- 厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2013-7242

Zenphoto contains an SQL injection in zp-core/zp-extensions/wordpress_import.php, exploitable via the tableprefix parameter. The vulnerability affects Zenphoto

CVE-2006-7242

The vulnerability (CVE-2006-7242) affects IBM FileNet P8 Application Engine (P8AE) — Workplace component (WP) version 3.5.1 prior to 3.5.1-001. Root cause: the AE Administrator role is not guaranteed to be present for Site Preferences modifications. Impact: remote authenticated users can bypass i...

CVE-2008-7242

CVE-2008-7242: Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allow remote attackers to inject arbitrary web script or HTML via a set of parameters (search, a, messagesubject, messagebody on certain pages; highlight, id, email, name, parent on index.php; doc...