Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator and V-Server Lite Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow 2...

Envira Gallery Lite Cross-Site Scripting Vulnerability (CNVD-2021-11280)

Envira Gallery Lite is a plugin that provides responsive gallery functionality for Wordpress from China's Envira Gallery. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detection, a...

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

CVE-2020-35581

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35582

CVE-2020-35582 affects Envira Gallery Lite prior to 1.8.3.3. It is a stored cross-site scripting (XSS) vulnerability: an attacker can inject arbitrary JavaScript/HTML via the post_title parameter in a POST to /wp-admin/post.php. The vulnerability is associated with Envira Gallery Lite, with affec...

CVE-2020-35581

CVE-2020-35581 details (Envira Gallery Lite) : A stored XSS vulnerability in Envira Gallery Lite versions before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML via a POST to /wp-admin/admin-ajax.php with the meta[title] parameter. Impact is user-side script execution. Remedia...

CVE-2020-35582: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

CVE-2020-35581: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

Envira Gallery Lite Cross-Site Scripting Vulnerability

Envira Gallery Lite is a plugin from China-based Envira Gallery that provides responsive gallery functionality for Wordpress. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detectio...

PT-2021-11808

Name of the Vulnerable Software and Affected Versions: Envira Gallery Lite versions prior to 1.8.3.3 Description: A stored cross-site scripting XSS issue allows remote attackers to inject arbitrary JavaScript/HTML code via a POST "/wp-admin/admin-ajax.php" request with the metatitle parameter...

Envira Gallery Lite 跨站脚本漏洞

Envira Gallery Lite is a plugin that provides responsive gallery functionality for Wordpress from China's Envira Gallery. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detection, a...

PT-2021-11809

Name of the Vulnerable Software and Affected Versions: Envira Gallery Lite versions prior to 1.8.3.3 Description: A stored cross-site scripting XSS issue allows remote attackers to inject arbitrary JavaScript/HTML code via a POST "/wp-admin/post.php" request with the post title parameter...

CVE-2020-17500: Improper Neutralization of Special Elements used in a Command

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection issue 1 of 4. The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result i...

Buffer overflow

The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far...

OAID Tengine Lite Buffer Error Vulnerability

OAID Tengine Lite is a tool from the OAID organization that implements the need for fast and efficient deployment of deep learning neural network models on embedded devices. OAID Tengine Lite 5.0.55.2 suffers from a buffer error vulnerability that stems from a buffer overflow and crash in the...

CVE-2020-28759: Buffer Copy without Checking Size of Input

The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far...