CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7421

CVE-2019-7421 affects Samsung X7400GX SyncThru Web Service (Firmware V6.A6.25, Main Firmware V11.01.05.25_08-21-2015). The vulnerability is a cross-site scripting flaw in the web interface, with the XSS vector disclosed in multiple parameters of /sws.login/gnb/loginView.sws (contextpath and based...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7420

CVE-2019-7420 affects SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in the web UI, exposed via the tabName parameter of /sws.application/information/networkinformationView.sws (per the NVD entry). This ind...

CVE-2019-7419

CVE-2019-7419 affects Samsung SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in /sws/leftmenu.sws affecting parameters ruiFw_id, ruiFw_pid, and ruiFw_title. Root cause is XSS, enabling script injection in t...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7418

The CVE-2019-7418 entry concerns a cross-site scripting (XSS) vulnerability in Samsung X7400GX SyncThru Web Service. The affected component is the web interface (/sws/swsAlert.sws) of Samsung X7400GX SyncThru Web Service firmware version V6.A6.25 / V11.01.05.25_08-21-2015. The root cause is refle...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

cockpit: Crash when parsing invalid base64 headers

It was found that cockpit used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

(0Day) Hewlett Packard Enterprise Intelligent Management Center MyFaces Static Key ViewState Use of Default Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the product. The web...

D-Link DIR-823G Improper Access Control Vulnerability

The D-Link DIR-823G is an AC1200M dual-band Gigabit wireless router. An improper access control vulnerability exists in the D-Link DIR-823G with firmware version 1.02B03. A remote attacker can exploit the vulnerability to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API of the web service...

ATutor Detection

Detection of ATutor. The script sends a connection request to the server and attempts to detect ATutor. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the TUNER web service on the TeNIX programmable logic controllers M1500 and M3000 allows a hacker to execute arbitrary code.

The vulnerability of the TUNER web service on the TeNIX programmable logic controllers M1500 and M3000 is related to the absence of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent webpage is passed unchanged to the generated error page. Exploiting...

Design/Logic Flaw

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2426

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...