CVE-2020-8033

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

Cross site scripting

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the 1 User Edit or 2 User Add form, 3 name field in the Role Add form, 4 name or number field in the Edit Group form, 5 tagKey or tagValue field in the Recording Rul...

kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command

A flaw was found in the Linux kernel's implementation of the Bluetooth Human Interface Device Protocol HIDP. A local attacker with access permissions to the Bluetooth device can issue an IOCTL which will trigger the dohidpsockioctl function in net/bluetooth/hidp/sock.c.c. This function can leak...

CVE-2020-6586

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered...

CVE-2020-6586

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

Cross site scripting

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

PVE: CVE-2020-8089 affects Piwigo 2.10.1 with a stored XSS in the Group Name Field on the group_list page. The issue stems from insufficient validation of client-side data, enabling potentially malicious input to be stored and reflected. Connected documents corroborate the vulnerability across mu...

piwigo -- Multible Vulnerabilities

Piwigo reports: Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-7997

ASUS WRT-AC66U 3 RT 3.0.0.4.37267 devices allow XSS via the Client Name field to the Parental Control feature...

CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2020-6583

BigProf Online Invoicing System OIS through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action...

SpotIM 2.2 - Name Denial Of Service

SpotIM 2.2 - Name Denial Of Service Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A '''...

CVE-2020-5305

Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen...

CVE-2020-5305

Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

Nsasoft Product Key Explorer name field Denial of Service Vulnerability

Product Key Explorer is a program key display tool. A denial of service vulnerability exists in the name field of Nsasoft Product Key Explorer. The vulnerability is due to improper handling of the length of the name field and can be exploited by an attacker to cause the program to crash...