Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

CVE-2019-1881 Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1881

CVE-2019-1881 affects Cisco Industrial Network Director (IND) web-based management interface. The issue is a CSRF vulnerability caused by insufficient CSRF protections, allowing an unauthenticated, remote attacker to induce a logged-in user to perform arbitrary actions on an affected device by co...

CVE-2019-1870

CVE-2019-1870 describes a cross-site scripting (XSS) vulnerability in Cisco Enterprise Chat and Email (ECE) Center’s web-based management interface. The issue stems from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to persuade a user to click a craf...

CVE-2019-1868 Cisco Webex Meetings Server Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could...

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email ECE Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2019-2364

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director IND affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and...

PT-2019-2356

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to access sensitive system information due to improper access control...

CVE-2019-1868: Undefined Security Weakness

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could...

CVE-2019-1870: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email ECE Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2019-1881: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

PT-2019-2350

Name of the Vulnerable Software and Affected Versions Cisco Enterprise Chat and Email ECE Center affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote...

PT-2019-4121

Name of the Vulnerable Software and Affected Versions TP-Link M7350 versions prior to firmware 190531 Description The issue is related to the lack of data sanitization at the management level, allowing a remote attacker to execute arbitrary commands before authentication. This can be exploited...

CMS Made Simple 2.2.10 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================= MGC ALERT 2019-002 - Original release date: April 10, 2019 - Last revised: May 22, 2019 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2019-11226...

Improper access control

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file...

Command injection

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...

CVE-2018-7826

The CVE-2018-7826 entry concerns a Command Injection vulnerability in the web-based GUI of the Schneider Electric 1st Gen Pelco Sarix Enhanced Camera . Connected sources describe the root cause as insufficient input validation during construction of executable commands in the web interface, enabl...

CVE-2018-7816

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file...

CVE-2018-7816

Technical details about CVE-2018-7816 are not provided in the connected documents. The available sources reiterate a permissions/privilege issue in the web GUI of the 1st Gen Pelco Sarix Enhanced Camera without specifics on affected versions or exploitability. Monitor for updates.

CVE-2018-7826: Improper Neutralization of Special Elements used in a Command

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...