37 matches found
CVE-2020-7343
CVE-2020-7343 describes a Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1. Local users can block McAfee product updates by manipulating a directory MA uses for temporary files, causing the product to continue operating with-out-of-date detection files. Public r...
CVE-2015-7343
creationtimestamp| type| source ---|---|--- 2020-03-09 18:13:11+00:00| seen| https://t.me/cibsecurity/10375...
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
CVE-2015-7343
The CVE-2015-7343 entry applies to the JNews Joomla Component prior to version 8.5.0, which is vulnerable to cross-site scripting (XSS) via the mailingsearch parameter. The connected documents confirm the vulnerable component and condition, but do not provide details on root cause, affected subco...
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
CVE-2019-7343
Reflected - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitorMethod' parameter value in the view monitor monitor.php because proper filtration is omitted...
CVE-2019-7343
Reflected - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitorMethod' parameter value in the view monitor monitor.php because proper filtration is omitted...
CVE-2019-7343
CVE-2019-7343 affects ZoneMinder up to version 1.32.3. The vulnerability is a reflected XSS where an attacker can inject HTML/JavaScript via the vulnerable parameter newMonitor[Method] in the view monitor page (monitor.php) due to improper input filtration. Impact is execution of script in a vict...
CVE-2019-7343
Reflected - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitorMethod' parameter value in the view monitor monitor.php because proper filtration is omitted...
CVE-2017-7343
CVE-2017-7343 : The connected documents confirm a vulnerability in Fortinet FortiPortal ≤ 4.0.0 described as an open redirect via the url parameter . This could allow an attacker to cause unauthorized actions by redirecting or manipulating the request, with the NVD entry noting that an attacker c...
CVE-2016-7343
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7343
CVE-2016-7343 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2014-7343
CVE-2014-7343 entry is rejected/not used; it does not represent an active vulnerability.
UBUNTU-CVE-2013-7343
Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix fo...
CVE-2013-7343
CVE-2013-7343 describes a cross-site scripting (XSS) vulnerability in Flowplayer’s Flash fallback component, specifically in the flowplayer.swf used by Flowplayer HTML5 5.4.3. The issue allows remote attackers to inject arbitrary web script or HTML by abusing URL encoding within the name of the c...