CVE-2022-32052: Out-of-bounds Write

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN004137a4...

CVE-2022-32046: Out-of-bounds Write

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN0041880c...

CVE-2022-32045: Out-of-bounds Write

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN00413be4...

PT-2022-21077 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 004137a4. This issue can be exploited, potentially allowing attackers to execute arbitrary code...

PT-2022-21071 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 00412ef4. This issue can be exploited, potentially leading to unintended consequences. Recommendations: F...

PT-2022-21069 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 00413be4. This issue affects the TOTOLINK T6 device. Recommendations: For TOTOLINK T6 version 4.1.9cu.517...

CVE-2022-32047: Out-of-bounds Write

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN00412ef4...

pfSense HAProxy package cross-site scripting vulnerability

pfsense is an open source routing and firewall software , based on freebsd system customization and development . A cross-site scripting vulnerability exists in pfSense's HAProxy package before version 0.5916. A remote attacker can use this vulnerability to inject arbitrary Web script or HTML wit...

CVE-2019-8953

The HAProxy package before 0.5916 for pfSense has XSS via the desc aka Description or tableactionsaclN parameter, related to haproxylisteners.php and haproxylistenersedit.php...

AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico Cross-Site Scripting Vulnerability

AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico is a cloud-based software, also available as an app, which, in addition to the standardized corporate management, also has specialized functions for the management of the learning process, with the goal of supporting the management of teachers...

CVE-2018-10138

The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...

CVE-2018-10138

The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...

CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

CVE-2017-17919: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

CVE-2015-7712

Multiple eval injection vulnerabilities in mods/standard/gradebook/editmarks.php in ATutor 2.2 and earlier allow remote authenticated users with the ATPRIVGRADEBOOK privilege to execute arbitrary PHP code via the 1 asc or 2 desc parameter...

CVE-2014-7987

Cross-site scripting XSS vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php...

CVE-2014-7987

Cross-site scripting XSS vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php...

PT-2014-8359

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 2.6.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to "install/index.php". This is a cross-site scripting XSS issue. Recommendations F...

CVE-2014-7987: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php...