PT-2020-1745

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express could allow an authenticated, remote attacker to upload arbitrary file...

CVE-2019-13163

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

Design/Logic Flaw

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

CVE-2019-13163

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

CVE-2011-1084

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1085

CSRF vulnerability in Smoothwall Express 3...

Cross site request forgery (csrf)

CSRF vulnerability in Smoothwall Express 3...

Cross site scripting

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1085

The CVE-2011-1085 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in Smoothwall Express 3. The connected records confirm affected software (Smoothwall Express 3) and classify the issue as CSRF, with CVSS details indicating high severity in the newer scope (CVSS 3.1: HIGH, 8.8) a...

CVE-2011-1085

CSRF vulnerability in Smoothwall Express 3...

CVE-2011-1084

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1084

CVE-2011-1084 is a cross-site scripting (XSS) vulnerability in Smoothwall Express 3. The CVSS v3.1 base metrics indicate a Network attack vector, Low attack complexity, No privileges required, but User interaction is Required and the scope is Changed, with Low impact on confidentiality and integr...

CVE-2011-1085: Cross-Site Request Forgery (CSRF)

CSRF vulnerability in Smoothwall Express 3...

CVE-2011-1084: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

PT-2020-7092

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3 Description The issue is related to a CSRF vulnerability. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

PT-2020-7091

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3 Description A cross-site scripting XSS issue affects the software, potentially allowing malicious scripts to be executed. Recommendations For Smoothwall Express version 3, update to a version that includes a fix fo...

Design/Logic Flaw

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the...

PT-2020-7825

Name of the Vulnerable Software and Affected Versions: Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices affected versions not specified Description: The issue arises because the devices rely on a GUI warning to ensure administrators configure login credentials. This make...

CVE-2015-2909: Improper Privilege Management

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the...

The vulnerability of the web interface of the Mongo-express database management system for MongoDB allows a hacker to execute arbitrary code on the target system by sending a specially crafted request.

The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...