CVE-2019-17070

CVE-2019-17070 affects the WordPress plugin liquid-speech-balloon (aka LIQUID SPEECH BALLOON) prior to version 1.0.7. The available documents describe a cross-site scripting (XSS) vulnerability (specifically with Internet Explorer) in this plugin. The root cause and specific vulnerable component/...

CVE-2019-17070

The liquid-speech-balloon aka LIQUID SPEECH BALLOON plugin before 1.0.7 for WordPress allows XSS with Internet Explorer...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-35571)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-35567)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft IE 9, 10, and 11, which arises from a program's failure to properly access memory objects and can be exploite...

CVE-2019-17070: Improper Neutralization of Input During Web Page Generation

The liquid-speech-balloon aka LIQUID SPEECH BALLOON plugin before 1.0.7 for WordPress allows XSS with Internet Explorer...

Microsoft Internet Explorer and Microsoft Edge Spoofing Vulnerability

Microsoft Edge and Microsoft Internet Explorer IE are both products of Microsoft Corporation.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet Explorer is a web browser that comes with Windows operating systems. Microsoft Edge is a web browser that comes with...

CVE-2019-9532: Cleartext Transmission of Sensitive Information

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal...

CVE-2019-9534: Download of Code Without Integrity Check

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to...

CVE-2019-9530: Improper Access Control

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory...

CVE-2019-9529: Improper Access Control

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device...

CVE-2019-1371: Out-of-bounds Write

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...

PT-2019-19687

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The issue concerns the lack of access restrictions on the web root directory, allowing an unauthenticated, local attacker connected to the device to access and download any file found in th...

PT-2019-19690

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 versions up to and including v1.08 Description The issue concerns the use of a static root password across different firmware versions of the Cobham EXPLORER 710. This static password could potentially be reverse-engineered...

PT-2019-19688

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The issue allows unauthenticated access to a specific port, which could enable a remote attacker to execute certain commands, including some that provide shell-like access to the device...

PT-2019-19689

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The web application portal of the Cobham EXPLORER 710 sends the login password in cleartext, potentially allowing an unauthenticated, local attacker to intercept the password and gain acces...

PT-2019-14936

Name of the Vulnerable Software and Affected Versions liquid-speech-balloon plugin versions prior to 1.0.7 Description The issue allows for XSS attacks, specifically with Internet Explorer. Recommendations For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue...

PT-2019-19691 · Cobham · Cobham Explorer 710

Name of the Vulnerable Software and Affected Versions: Cobham EXPLORER 710 firmware version 1.07 Description: The issue concerns the lack of firmware image validation in the device. Development scripts that were left in the firmware can be exploited to upload a custom firmware image. This could...

CVE-2019-9531: Improper Access Control

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...

CVE-2019-9533: Insufficiently Protected Credentials

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device...

Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-35806)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A buffer overflow vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE 9...