CVE-2020-35548

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

CVE-2020-35548

CVE-2020-35548 affects Finder on Samsung mobile devices running Q(10.0). The issue arises from calling a non-existent provider, which allows an attacker to cause a denial of service. Connected sources corroborate the same description; no explicit remediation or patch details are provided in the s...

CVE-2020-35548

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

CVE-2020-35548: Undefined Security Weakness

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

CVE-2020-35550: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...

PT-2020-17346

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 and R11.0 software Description An issue was discovered that allows attackers to cause a denial of service unlock failure by triggering a power-shortage incident that causes a false-positive attack detection...

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95922)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2226-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

CVE-2020-29257

CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...

PT-2020-17126

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. It can be exploited via the q parameter to the "feedback.php" endpoint. Recommendations For Online Examination System version...

CVE-2020-29257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

CVE-2020-29283: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

PT-2020-17132

Name of the Vulnerable Software and Affected Versions Online Doctor Appointment Booking System affected versions not specified Description An SQL injection issue was found in the Online Doctor Appointment Booking System, which uses PHP and MySQL. The vulnerability is exploitable via the q paramet...

CVE-2020-29395: Improper Neutralization of Input During Web Page Generation

The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field...

CVE-2020-28342

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 China / India software. The S Secure application allows attackers to bypass authentication for a locked Gallery application via the Reminder application. The Samsung ID is SVE-2020-18689 November 2020...

CVE-2020-28341

The CVE-2020-28341 entry concerns Samsung mobile devices running Q(10.0) on Exynos990 chips, where the S3K250AF Secure Element CC EAL 5+ chip is affected. The underlying issue is a buffer overflow in the Secure Element component, leading to arbitrary code execution and leakage of sensitive inform...