CVE-2018-17211

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. An unauthenticated attacker can view details about the printers associated with CPS via a crafted HTTP GET request...

CVE-2018-17211

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. An unauthenticated attacker can view details about the printers associated with CPS via a crafted HTTP GET request...

CVE-2018-17211: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. An unauthenticated attacker can view details about the printers associated with CPS via a crafted HTTP GET request...

PT-2019-9416

Name of the Vulnerable Software and Affected Versions PrinterOn Central Print Services CPS versions 4.1.4 and earlier Description An issue allows an unauthenticated attacker to view details about the printers associated with CPS via a crafted HTTP GET request. Recommendations For PrinterOn Centra...

CVE-2019-1010199

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

CVE-2019-1010199

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

Cross site scripting

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

CVE-2019-1010199

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

CVE-2019-1010199

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

PT-2019-11507

Name of the Vulnerable Software and Affected Versions: Voice Builder versions prior to commit f6660e6d8f0d1d931359d591dbdec580fef36d36 Description: The issue affects two web servers in the project, exposing three vulnerable endpoints that can be accessed remotely, specifically at "/tts" and...

PT-2019-11505

Name of the Vulnerable Software and Affected Versions: ServiceStack ServiceStack Framework versions prior to 5.2.0 Description: The issue allows JavaScript to be reflected in the server response, which is then executed by the browser. This is due to a lack of server-side validation and the...

CVE-2019-1010200: Improper Neutralization of Special Elements used in an OS Command

Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'. The impact is: Remote code execution with the same privileges as th...

CVE-2019-1010199: Improper Neutralization of Input During Web Page Generation

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting XSS. The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side...

CVE-2019-1010246

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure e.g. username, password. The component is: The API call in the function allowAction in...

CVE-2019-1010246

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure e.g. username, password. The component is: The API call in the function allowAction in...

CVE-2019-1010246

CVE-2019-1010246 affects MailCleaner prior to c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9. The vulnerability is an unauthenticated disclosure of MySQL password information via the API call in the function allowAction() in NewslettersController.php, exploitable through an HTTP GET request. Impact is ...

CVE-2019-1010246

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure e.g. username, password. The component is: The API call in the function allowAction in...

The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2, related to insufficient access control checks, allows a perpetrator to gain access to configuration files.

The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2 is related to insufficient verification of access rights. Exploiting this vulnerability can allow an attacker to gain access to configuration files through a specially crafted GET request...

PT-2019-3124

Name of the Vulnerable Software and Affected Versions ТрастМед:Лекарственное обеспечение affected versions not specified Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to perform cross-site scripting attacks by manipulating the na...

Nortek Security & Control Linear eMerge E3-Series License Issue Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. Nortek Security & Control Linear eMerge E3-Series is vulnerable to an authorization issue. An attacker can use this vulnerability to bypass authorization with a GET request, obtai...