480 matches found
CVE-2020-27691
The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings...
Cross site scripting
The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings...
CVE-2020-27691
The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings...
CVE-2020-27691
The CVE-2020-27691 entry concerns the Verve Connect VH510 (Relish) gateway. Affected firmware versions prior to 1.0.1.6L0516 are vulnerable to cross-site scripting (XSS) via the device’s UI settings pages: URLBlocking, SNMP, and System Log settings. The root cause is an input handling flaw in the...
CVE-2020-27691: Improper Neutralization of Input During Web Page Generation
The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings...
PT-2020-16767
Name of the Vulnerable Software and Affected Versions Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 Description The issue allows for cross-site scripting XSS attacks via the URLBlocking Settings, SNMP Settings, and System Log Settings. This could potentially lead to maliciou...
Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability
The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to gain unauthorized access to /systemlog.tar.gz to obtain information such as /etc/shadow and...
PT-2020-15003
Name of the Vulnerable Software and Affected Versions SEOWON INTECH SLC-130 and SLR-120S devices affected versions not specified Description The issue allows for Remote Code Execution via the ipAddr parameter to the "system log.cgi" page. This enables an attacker to execute arbitrary code on the...
Windows GDI Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
Cisco Identity Services Engine DoS
The vulnerability of the system log processing mechanism of the Cisco Identity Services Engine ISE management platform is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...
Input validation
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
CVE-2020-3307 Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
Inadequate Logging
tog-pegasus does not log authentication attempts. Failed authentication attempts against the OpenPegasus CIM server were not logged to the system log as documented in README.RedHat.Security. An attacker could use this flaw to perform password guessing attacks against a user account without leavin...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...