CVE-2015-9288

The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials...

CVE-2019-9288

In libhidcommandjni, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the USB service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android Versions: Android-10...

Multiple CDATA product security breaches

Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...

Security breaches in multiple CDATA products

Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...

Multiple CDATA product trust management issue vulnerabilities

Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288

The CVE-2020-9288 entry concerns FortiWLC (Fortinet) with an improper neutralization of input, enabling a stored Cross-Site Scripting (XSS) attack via ESS profile or Radius Profile. Affected product: FortiWLC 8.5.1 (and prior versions per CNVD/CVE records). Authentication requirements: remote, wi...

CVE-2019-9288

CVE-2019-9288 affects Android 10 via a missing bounds check in libhidcommand_jni, enabling an out-of-bounds write that could cause local elevation of privilege in the USB service without user interaction. Impact is limited to the USB service and requires no additional privileges. Remediation is a...

Code injection

The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288...

CVE-2015-9288

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:14+00:00| seen| https://t.me/cibsecurity/5776...

CVE-2015-9288

CVE-2015-9288 affects the Unity Web Player plugin. Affected versions include the plugin prior to 4.6.6f2 and 5.x prior to 5.0.3f2. The vulnerability allows attackers to read messages or access online services using a victim’s credentials, implying credential-access leakage via the plugin. Connect...

CVE-2017-9288

The WordPress Raygun4WP plugin (v1.8.0 and earlier) is vulnerable to a reflected XSS via sendtesterror.php (backurl parameter). Root cause: improper input handling enables injection of arbitrary script in the user’s browser, potentially leading to script execution in the site context. Affected pr...

CVE-2014-9288

CVE-2014-9288 is rejected and does not represent an active vulnerability entry.

CVE-2016-9288

CVE-2016-9288 affects Exponent CMS v2.4.0 or older, where the parameter target in DragnDropReRank is used without filtration in framework/modules/navigation/controllers/navigationController.php, enabling SQL injection. The vulnerability is described consistently across sources (NVD entry and CNVD...