Kodak InSite Cross-Site Scripting Vulnerability

Kodak InSite is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in Kodak InSite versions 6.5 through 8.0. A remote attacker can inject arbitrary web script by sending the 'paramFile' parameter to the /Site/Troubleshooting/DiagnosticReport.asp file or...

CVE-2017-9085

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

CVE-2017-9085

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

CVE-2017-9085

Kodak InSite (versions 6.5–8.0) is affected by cross-site scripting (XSS) via the parameterFile parameter to two pages: /Site/Troubleshooting/DiagnosticReport.asp and /Site/Troubleshooting/SpeedTest.asp. The vulnerability allows remote attackers to inject arbitrary web scripts. The sources in the...

CVE-2017-9085

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

DEBIAN-CVE-2017-14608

In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

libraw -- Out-of-bounds Read

libraw developers report: In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

LibRaw 'kodak_radc_load_raw' Function Denial of Service Vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'kodakradcloadraw' function in the dcrawcommon.cpp file in LibRaw version 0.18.2. A remote attacker can exploit this vulnerability to cau...

DEBIAN-CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

UBUNTU-CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

Kodak InSite 6.5 <= 8.0 XSS Vulnerability

Kodak InSite is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Kodak InSite Detection (HTTP)

HTTP based detection of Kodak InSite. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Kodak InSite 8.0 Cross Site Scripting

========================================= Class Input Validation Error CVE Remote Yes Local No Credit rsanchezr Vulnerable Kodak InSite 6.5 to 8.0 Kodak InSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

support.en.kodak.com XSS vulnerability

Vulnerable URL: https://support.en.kodak.com/ci/fattach/get/1002986/1494131961/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

store.kodak.com Open Redirect vulnerability

Vulnerable URL: https://store.kodak.com/store/kodak/enIE/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Arbitrary File Download and Weak Password Vulnerability in DVR Access Gateway of Suzhou Kedar Technology Co.

DVR digital video recorder is a set of computer system for image storage and processing, with the function of long time video/voice recording, audio recording, remote monitoring and control. The DVR access gateway of Suzhou Kodak Technology Co., Ltd. suffers from arbitrary file download and weak...

support.kodak.com XSS vulnerability

Vulnerable URL: http://support.kodak.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...