cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19905)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19904)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of proper...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20974)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the 'arg4' and 'arg9' parameters of some functions of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20975)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the URI path of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a denial of service and execute arbitrary...

Swisscom Centro Grande Cross-Site Scripting Vulnerability

The Swisscom Centro Grande is a router from Swisscom, Switzerland. A cross-site scripting vulnerability exists in Swisscom Centro Grande versions prior to 6.16.12, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerabilit...

Kyocera ECOSYS M5526cdw Integer Overflow Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. An integer overflow vulnerability in the 'arg3' parameter of some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701 can be exploited by an attacker to cause the device to crash or...

Kyocera ECOSYS M5526cdw Buffer Overflow Vulnerability (CNVD-2020-20980)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A vulnerability exists in the 'okhtmlfile' and 'failhtmlfile' for some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701. parameter have a buffer overflow vulnerability The vulnerabili...

Kyocera ECOSYS M5526CDW Path Traversal Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A path traversal vulnerability in the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which arises from a failure of a networked system or product to properly filter for special elements in the path...

Wyse Management Suite Cross-Site Scripting Vulnerability

Wyse Management Suite WMS is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A cross-site scripting vulnerability exists in Wyse Management Suite versions...

Fortinet FortiADC Cross-Site Scripting Vulnerability

Fortinet FortiADC is an application delivery controller. A cross-site scripting vulnerability exists in Fortinet FortiADC 5.3.3 and earlier versions. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability t...

Kyocera ECOSYS M5526cdw Cross-Site Scripting Vulnerability (CNVD-2020-20976)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A cross-site scripting vulnerability in the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which stems from a lack of proper validation of client-side data in the WEB application, can be exploited ...

CVE-2019-19821

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

Authentication flaw

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

CVE-2019-19821

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

CVE-2019-19821

CVE-2019-19821 affects the Combodo iTop web application. A post‑authentication privilege escalation allows regular authenticated users to access and modify information with administrative privileges due to improper handling of HTTP Location header in server responses. Mitigation per sources is to...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-17384)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions 12.1 through 12.8.1, which stems fro...

pizzatools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1119077 Security Researcher metamorfosec Helped patch 1973 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting pizzatools.com websit...

zohur12.ir Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1118867 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting zohur12.ir website and it...

Bundeswehr Karriere - Cross Site Scripting Vulnerability

Document Title: =============== Bundeswehr Karriere - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2213 Vulnerability Magazine:...

Fortinet FortiWeb Information Disclosure Vulnerability (CNVD-2020-17958)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...