Cross site scripting

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...

CVE-2017-7342

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button...

CVE-2017-7342

CVE-2017-7342 relates to Fortinet FortiPortal. Affected product: FortiPortal versions 4.0.0 and earlier. Root cause: a weak password recovery process that can allow an attacker to execute unauthorized code or commands via a hidden Close button. Impact: as per NVD, high/severe potential with remot...

CVE-2017-7340

CVE-2017-7340 affects Fortinet FortiPortal 4.0.0 and earlier. A Cross-Site Scripting flaw allows an attacker to execute unauthorized code/commands via the FortiView applicationSearch parameter. The vulnerability is tied to FortiPortal’s FortiView functionality; no exploitation details or patch/ve...

CVE-2017-7340

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...

CVE-2017-7340

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...

HPSBHF03611 rev. 2 - NVIDIA GPU Display Driver Vulnerabilities

Potential Security Impact Denial of service, Escalation of privilege, Unauthorized code execution, or Information disclosure Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY HP has been notified of potential security vulnerabilities with the GPU Display...

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or IntelR TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrar...

Gemalto Sentinel UltraPro

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: Gemalto Equipment: Sentinel UltraPro Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow execution of unauthorized code or commands. 3...

Format string

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable...

CVE-2018-1352

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable...

CVE-2018-1352

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable...

CVE-2018-1352

CVE-2018-1352 : Fortinet FortiOS 5.6.0 is affected by a format-string vulnerability in the SSH username handling that can enable remote code execution or commands, potentially causing memory corruption. The vulnerability is tied to the SSH username variable and is described in Fortinet’s FG-IR-18...

CVE-2018-1352

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable...

Design/Logic Flaw

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user...

CVE-2018-16098

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user...

CVE-2018-16098

In Lenovo ThinkPad laptops, an unquoted search path vulnerability in certain Synaptics Pointing Device driver versions could allow unauthorized code execution as a low-privilege user. The issue is caused by an unquoted path in the driver, with local attack vector and no user interaction required ...

CVE-2018-16098

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user...

Fortinet FortiOS 5.4.x < 5.4.6 / 5.6.x < 5.6.1 XSS (CVE-2017-3131)

The version of Fortinet FortiOS running on the remote device is 5.4.x prior to 5.4.6, or 5.6.x prior to 5.6.1. It is, therefore, affected by a Cross-site Scripting XSS vulnerability that allows attackers to execute unauthorized code or commands via the filter input in Applications under FortiView...

CVE-2018-19036

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...