6797 matches found
CVE-2011-1084
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
CVE-2011-1085
CSRF vulnerability in Smoothwall Express 3...
Cross site request forgery (csrf)
CSRF vulnerability in Smoothwall Express 3...
Cross site scripting
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
CVE-2011-1085
CSRF vulnerability in Smoothwall Express 3...
CVE-2011-1085
The CVE-2011-1085 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in Smoothwall Express 3. The connected records confirm affected software (Smoothwall Express 3) and classify the issue as CSRF, with CVSS details indicating high severity in the newer scope (CVSS 3.1: HIGH, 8.8) a...
CVE-2011-1084
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
CVE-2011-1084
CVE-2011-1084 is a cross-site scripting (XSS) vulnerability in Smoothwall Express 3. The CVSS v3.1 base metrics indicate a Network attack vector, Low attack complexity, No privileges required, but User interaction is Required and the scope is Changed, with Low impact on confidentiality and integr...
CVE-2011-1085: Cross-Site Request Forgery (CSRF)
CSRF vulnerability in Smoothwall Express 3...
PT-2020-7092
Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3 Description The issue is related to a CSRF vulnerability. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
CVE-2011-1084: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
PT-2020-7091
Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3 Description A cross-site scripting XSS issue affects the software, potentially allowing malicious scripts to be executed. Recommendations For Smoothwall Express version 3, update to a version that includes a fix fo...
Design/Logic Flaw
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the...
PT-2020-7825
Name of the Vulnerable Software and Affected Versions: Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices affected versions not specified Description: The issue arises because the devices rely on a GUI warning to ensure administrators configure login credentials. This make...
CVE-2015-2909: Improper Privilege Management
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the...
The vulnerability of the web interface of the Mongo-express database management system for MongoDB allows a hacker to execute arbitrary code on the target system by sending a specially crafted request.
The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...
Node.js third-party modules: Server Side Request Forgery in Uppy npm module
Hi Team, While we were testing our security engine at Shieldfy https://shieldfy.io, We found a server side request forgery SSRF vulnerability in Uppy npm package. It allows hacker to easily extract inside information from the server or take control of internal services. Module module name: Uppy...
HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability
Potential Security Impact Arbitrary Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT. Reported by: Mickey Shkatov from Eclypsium, and Zoltan Harmath from Microsoft. VULNERABILITY SUMMARY A potential security vulnerability with pre-boot...
