320 matches found
Cross site scripting
A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...
The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to compromise data integrity.
The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...
The vulnerability of the EKOM-3000 data collection and transmission device, which arises due to insufficient verification of input data, allows a perpetrator to cause temporary service interruption of the device’s web service.
The vulnerability of the ECOOM-3000 data collection and transmission device exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to temporarily disrupt the web service of the device’s operation...
The vulnerability of Panasonic Video Insight VMS software arises from insufficient verification of data provided by users. This allows a hacker to execute arbitrary code.
The vulnerability of Panasonic Video Insight VMS software lies in the insufficient verification of data provided by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted malicious request...
The vulnerability of Google Chrome’s payment security policy, related to the lack of a mechanism for verifying input data, allows attackers to compromise the integrity of data.
The vulnerability of Google Chrome’s payment security policy is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...
The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...
The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...
The vulnerability of Google Chrome’s browser extension security policies, related to the lack of a mechanism for verifying input data, allows attackers to trigger a service failure.
The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure through the created HTML page...
The vulnerability of the data input mechanism in Blink’s Google Chrome browser lies in the lack of a mechanism for verifying the correctness of entered data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...
CVE-2020-10831: Insufficient Verification of Data Authenticity
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsung ID is SVE-2019-16013 March 2020...
finisterenord.unblog.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1112416 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting finisterenord.unblog.fr...
The vulnerability of the microprogramming software for Desigo PX arises from incorrect verification of input data by the PX Web service (port TCP/80). This allows a perpetrator to trigger a service failure.
The vulnerability of the microprogramming software for Desigo PX is related to incorrect verification of input data by the PX Web service port TCP/80. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the ModPlug_InstrumentName and ModPlug_SampleName functions in the libopenmpt_modplug.c library, which are used for processing modular music, is related to buffer overflows in memory. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ModPlugInstrumentName and ModPlugSampleName functions libopenmptmodplug.c in the library for handling modular music allows for errors during the verification of data provided by users before they are copied to a fixed-size buffer. Exploiting this vulnerability enables an...
The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.
The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...
The vulnerability of the NX-API network operating system in Cisco NX-OS routers allows a attacker to induce a service failure.
The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves errors during the verification of data entered by the user in the Certificate Request Service function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with ro...
The vulnerability of the network software SKS Keyserver and the GNU Privacy Guard (GnuPG) software for encrypting information and generating digital signatures arises from the lack of verification of host data in the certificates. This allows attackers to trigger a service failure.
The vulnerability of the network software SKS Keyserver and the information encryption and digital signatures generation programs of GNU Privacy Guard GnuPG is related to the lack of verification of host data in the certificates. Exploiting this vulnerability could allow a malicious actor to caus...
The vulnerability of Microprogrammed Software in Cisco Small Business routers of the Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 series exists due to insufficient testing of input data. This allows attackers to trigger service failures.
The vulnerability of Cisco Small Business router microprogramming software of models Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending malicious...