CVE-2019-16327

D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-46442)

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability exists in SAP BusinessObjects...

Red Hat JBoss BRMS Cross-Site Scripting Vulnerability

Red Hat JBoss BRMS is a suite of platforms for the development of containerized microservices and applications to automate business decisions from Red Hat, USA. A cross-site scripting vulnerability exists in Red Hat JBoss BRMS versions prior to 5.1.0, which stems from a lack of proper validation ...

WordPress NextGEN Gallery Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress NextGEN Gallery. The...

Activity for Drupal Cross-Site Scripting Vulnerability

Drupal is an open source content management system developed by the Drupal community using the PHP language.Activity is one of the Activity modules. A cross-site scripting vulnerability exists in Activity for Drupal version 6.x-1.x. The vulnerability stems from the WEB application lacking proper...

matomo cross-site scripting vulnerability (CNVD-2019-42232)

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from the WEB application failing to properly validate client-side data. An attacker can exploit the vulnerability to...

SAP Enable Now Cross-Site Scripting Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is mainly used for online learning and training in SAP and non-SAP systems. A cross-site scripting vulnerability exists in SAP Enable Now. The vulnerability stems from a lack of proper...

Smartweares HOME easy Authentication Bypass Vulnerability

Smartweares HOME easy is prone to an authentication bypass vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

Red Hat JBoss AeroGear Cross-Site Scripting Vulnerability

Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat USA. The product provides features such as data synchronization, identity management and push notifications. A cross-site scripting vulnerability exists in Red Hat JBoss AeroGear, which stems from the la...

TYPO3 cross-site scripting vulnerability (CNVD-2019-41241)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the backend of TYPO3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Smartwares HOME Easy 1.0.9 Authentication Bypass

Smartwares HOME easy v1.0.9 Client-Side Authentication Bypass Vendor: Smartwares Product web page: https://www.smartwares.eu Affected version: =1.0.9 Summary: Home Easy/Smartwares are a range of products designed to remotely control your home using wireless technology. Home Easy/Smartwares is ver...

TYPO3 cross-site scripting vulnerability (CNVD-2019-40299)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in Extension Manager in TYPO3. The vulnerability stems from the lack of proper validation of client-side data in the WEB application, which can b...

XunRuiCMS Cross-Site Scripting Vulnerability

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China XunRuiCloud Software Development Company. A cross-site scripting vulnerability exists in XunRuiCMS version 4.3.1. The vulnerability stems from the lack of proper validation of client-si...

Online Store System Cross-Site Scripting Vulnerability

Online Store System is an e-commerce system. A cross-site scripting vulnerability exists in Online Store System v1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...

Sourcecodester Restaurant Management System Cross-Site Scripting Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A cross-site scripting vulnerability exists in the Sourcecodester Restaurant Management System version 1.0, which stems from the lack of proper validation of client-side data in the web application and can be exploited...

WordPress Artificial Intelligence theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Artificial Intelligence theme is an artificial intelligence website theme plugin. A cross-site scripting vulnerability exists in...

HCL Traveler Cross-Site Scripting Vulnerability

HCL Traveler is a real-time synchronization of email, calendar, address book data, etc. A cross-site scripting vulnerability exists in HCL Traveler 9.x and prior versions, which stems from a lack of proper validation of client-side data by the web application and can be exploited by an attacker t...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-36981)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.1 and 7.10.2. The vulnerabili...

Sensorweb ScadaBR Cross-Site Scripting Vulnerability (CNVD-2019-36859)

Sensorweb ScadaBR is a suite of open source software from Sensorweb for developing automated data acquisition and monitoring applications. A cross-site scripting vulnerability exists in the login form /ScadaBR/login.htm in Sensorweb ScadaBR version 1.0CE, which stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-34451)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the SSL Certificate Upload interface in versions of cPanel prior to 82.0.15. The...