3187 matches found
CVE-2019-20073
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
CVE-2019-20073
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
CVE-2019-20073
CVE-2019-20073 affects Netis DL4323 devices and is described as a Cross-Site Scripting (XSS) vulnerability via the form2userconfig.cgi username parameter in User Account Configuration. The root cause cited is lack of proper validation of client data by the WEB application. The connected records c...
D-Link DIR-615 Cross-Site Scripting Vulnerability (CNVD-2020-02707)
The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. A cross-site scripting vulnerability exists in the user account configuration page in the D-Link DIR-615. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker can explo...
Authentication flaw
An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
Cross site scripting
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
PT-2019-19128 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.5 Description: An authentication issue was addressed with improved state management, potentially allowing a user to be unexpectedly logged in to another user’s account. Recommendations: For macOS versions prior t...
Cisco NX-OS Software Privilege Escalation Vulnerability
According to its self-reported version, Cisco NX-OS Software is affected by following vulnerability - A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device.The vulnerability i...
D-Link DIR-615 - Privilege Escalation Vulnerability
Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 - Privilege Escalation Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmwa...
Cloud Foundry UAA Log Message Disclosure Vulnerability
Cloud Foundry UAA is an authentication and managed service endpoint for the CloudFoundry cloud platform from the Cloud Foundry Foundation in the United States. A log information disclosure vulnerability exists in Cloud Foundry UAA. An attacker can exploit this vulnerability to gain access to user...
SYS.2.2.2.A7
Ziel des Bausteins SYS.2.2.2 ist der Schutz von Informationen, die durch und auf Windows 8.1-Clients verarbeiten werden. Die Standard-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify...
Security update for apache2-mod_perl (moderate)
openSUSE Security Update: Security update for apache2-modperl Announcement ID: openSUSE-SU-2019:2558-1 Rating: moderate References: 1091625 1156944 Cross-References: CVE-2011-2767 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that solves one vulnerability an...
OPENSUSE-SU-2019:2549-1 Security update for apache2-mod_perl
This update for apache2-modperl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account bsc1156944. Other issue addressed: - Restore process name after svsetpvmg call...
CVE-2019-5509
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...
CVE-2019-5509
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...
Code injection
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...