NETGEAR WAC120 Cross-Site Scripting Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

CVE-2021-41542: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.44, Climatix POL909 AWM module All versions V11.36. The User Management page of affected devices is vulnerable to cross-site scripting XSS. The vulnerability allows an attacker to send malicious JavaScript code whi...

Climatix POL909 cross-site scripting vulnerability

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and to implement and load customer web pages and features.Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to impleme...

PT-2022-11423

Name of the Vulnerable Software and Affected Versions Climatix POL909 AWB module versions prior to V11.44 Climatix POL909 AWM module versions prior to V11.36 Description A cross-site scripting XSS issue has been identified in the Group Management page of affected devices. This issue allows an...

WAGO Cross-Site Request Forgery Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

CVE-2021-41541: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.44, Climatix POL909 AWM module All versions V11.36. The Group Management page of affected devices is vulnerable to cross-site scripting XSS. The vulnerability allows an attacker to send malicious JavaScript code...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

Cross site scripting

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

The CVE-2021-46382 entry concerns the Netgear WAC120 AC Access Point, with an unauthenticated cross-site scripting (XSS) vulnerability. Connected records consistently describe this as XSS that could enable session hijacking and, in some notes, clipboard hijacking. The NVD entry provides CVSS scor...

CVE-2021-46382: Improper Neutralization of Input During Web Page Generation

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

NETGEAR WAC120 Cross-Site Script Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

Zyxel ZyWALL 2 Plus Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Zyxel ZyWALL 2 Plus, a firewall appliance for corporate environments from Zyxel China, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to be able to execute arbitrary...

Event Management: Cross-site Scripting Vulnerabilities

Event Management is an event management system, and a cross-site scripting vulnerability exists in Event Management that could be exploited to obtain a PHPSESSID and use it to manipulate a created system login session...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

Cross site scripting

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

CVE-2021-46387

CVE-2021-46387 affects ZyXEL ZyWALL 2 Plus Internet Security Appliance. The issue is a Cross-Site Scripting (XSS) vulnerability caused by insecure URI handling, enabling an attacker to execute arbitrary JavaScript in a user’s browser and potentially perform clipboard hijacking or session hijackin...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...