EUVD-2024-36059

Malicious code in bioql PyPI...

CVE-2024-36397

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-36397

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-36397 Vantiva - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-36397

CVE-2024-36397 affects Vantiva MediaAccess DGA2232 v19.4. The issue is CWE-79 (Cross-site Scripting) caused by improper neutralization of input during web page generation in the affected software. Reported metrics place the severity at CVSS v3.1 base score 6.1 (MEDIUM) with network attack vector,...

CVE-2024-36397 Vantiva - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Vantiva MediaAccess DGA2232 Cross-Site Scripting Vulnerability

Vantiva MediaAccess DGA2232 is an application from Vantiva, Inc. A cross-site scripting vulnerability exists in Vantiva MediaAccess DGA2232 version v19.4, which stems from improper neutralization of input during web page generation...

PT-2024-26968 · Vantiva · Mediaaccess Dga2232

Name of the Vulnerable Software and Affected Versions: Vantiva - MediaAccess DGA2232 version 19.4 Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: For version 19.4, update to a newer version...

CVE-2024-36397: Improper Neutralization of Input During Web Page Generation

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

PT-2023-12998 · Fastweb · Fastweb Fastgate Mediaaccess Dga4131Fwb +1

Name of the Vulnerable Software and Affected Versions: Fastweb FASTGate MediaAccess FGA2130FWB version 18.3.n.0482 FW 230 FGA2130 Fastweb FASTGate MediaAccess DGA4131FWB versions up to 18.3.n.0462 FW 261 DGA4131 Description: A heap-based buffer overflow in a network service allows a remote attack...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114: Out-of-bounds Write

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Exploit for Out-of-bounds Write in Fastweb Fastgate_Vdsl2_Dga4131Fwb_Firmware

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114...

Technicolor MediaAccess TG789vac v2 HP Device Cross-Site Scripting Vulnerability

Technicolor MediaAccess TG789vac v2 HP is a gateway device from the French Technicolor group. A cross-site scripting vulnerability exists in the admin web interface of Technicolor MediaAccess TG789vac v2 HP devices with firmware version 16.3.7190-2761005-20161004084353, which can be exploited by...

Cross site scripting

The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...

CVE-2018-8827

The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...

CVE-2018-8827

Technicolor MediaAccess TG789vac v2 HP devices with firmware 16.3.7190-2761005-20161004084353 expose a cross-site scripting vulnerability in the admin web interface. The Log viewer interface can be tainted by unsanitised input supplied via a crafted HTTP Referer header, enabling an unauthenticate...

CVE-2018-8827

The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...

PT-2019-11148

Name of the Vulnerable Software and Affected Versions: Technicolor MediaAccess TG789vac v2 HP version v16.3.7190-2761005-20161004084353 Description: The issue concerns the admin web interface, where unsanitized user input is displayed, allowing an unauthenticated malicious user to embed JavaScrip...