CVE-2025-53484

User-controlled inputs are improperly escaped in: VotePage.php poll option input ResultPage::getPagesTab and getErrorsTab user-controllable page names This allows attackers to inject JavaScript and compromise user sessions under certain conditions. This issue affects Mediawiki - SecurePoll...

CVE-2025-53484: Improper Neutralization of Input During Web Page Generation

User-controlled inputs are improperly escaped in: VotePage.php poll option input ResultPage::getPagesTab and getErrorsTab user-controllable page names This allows attackers to inject JavaScript and compromise user sessions under certain conditions. This issue affects Mediawiki - SecurePoll...

PT-2018-13177

Name of the Vulnerable Software and Affected Versions Argus Surveillance DVR version 4.0.0.0 Description The issue allows unauthenticated directory traversal, resulting in file disclosure. This is achieved by using a ..%2F in the RESULTPAGE parameter of the "WEBACCOUNT.CGI" endpoint...

CVE-2018-15745: Improper Limitation of a Pathname to a Restricted Directory

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...