CVE-2020-10668

The Canon Océ Colorwave 500 printer web app (version 4.0.0.0) is vulnerable to Reflected XSS in /home.jsp via the openSI parameter. Root cause is input from user-controlled parameter not being properly sanitized, per CVE-2020-10668. The issue is fixed in the latest version. If upgrading is possib...

CVE-2020-10668

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. The vulnerable parameter is openSI. NOTE: this is fixed in the latest version...

CVE-2019-16070

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...

CVE-2019-16070

NETSAS Enigma NMS 65.0.0 and earlier contains stored XSS vulnerabilities (CVE-2019-16070) in the WEB application, exploitable through web form inputs. Root cause per sources: lack/insufficient validation of client-side data in the web app. Impact described as client-side code execution; CVSS data...

CVE-2019-16065

A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...

pki-core cross-site scripting vulnerability

pki-core is a library that provides an API for PKI operations. A cross-site scripting vulnerability exists in the Token Processing Service TPS of pki-core. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

SAP Commerce Cross-Site Scripting Vulnerability (CNVD-2020-21059)

SAP Commerce is a cloud-based e-commerce platform from SAP, a German company. The product supports sales management, marketing management, order management and operations management , etc. SmartEdit Extension is one of the smart editor extension program . A cross-site scripting vulnerability exis...

Discourse < 2.5.0.beta2 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

Discourse < 2.4.0.beta6 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2020-21071)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Discourse < 2.4.0.beta5 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

topminis.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1120081 Security Researcher haxmov Helped patch 708 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting topminis.com.br website and i...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19905)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19904)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of proper...

Swisscom Centro Grande Cross-Site Scripting Vulnerability

The Swisscom Centro Grande is a router from Swisscom, Switzerland. A cross-site scripting vulnerability exists in Swisscom Centro Grande versions prior to 6.16.12, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerabilit...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20974)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the 'arg4' and 'arg9' parameters of some functions of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20975)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the URI path of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a denial of service and execute arbitrary...

Kyocera ECOSYS M5526CDW Path Traversal Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A path traversal vulnerability in the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which arises from a failure of a networked system or product to properly filter for special elements in the path...

Kyocera ECOSYS M5526cdw Integer Overflow Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. An integer overflow vulnerability in the 'arg3' parameter of some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701 can be exploited by an attacker to cause the device to crash or...

Kyocera ECOSYS M5526cdw Buffer Overflow Vulnerability (CNVD-2020-20980)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A vulnerability exists in the 'okhtmlfile' and 'failhtmlfile' for some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701. parameter have a buffer overflow vulnerability The vulnerabili...