CVE-2013-5988

The CVE-2013-5988 entry concerns an XSS vulnerability in the All in One SEO Pack WordPress plugin (pre-2.0.3.1) exposed via the Search parameter. Affected software is the All in One SEO Pack WordPress plugin; vulnerable component is the Search parameter handling in versions before 2.0.3.1. The ro...

CVE-2013-5988: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

PT-2020-7535

Name of the Vulnerable Software and Affected Versions: All in One SEO Pack plugin versions prior to 2.0.3.1 Description: A Cross-site Scripting XSS issue exists in the plugin via the Search parameter. This allows for potential malicious script execution. Recommendations: For versions prior to...

url.hqhl.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...

CVE-2020-6768

A path traversal vulnerability in the Bosch Video Management System BVMS NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affect...

Authentication flaw

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

The vulnerability of the MMS All software component for Oracle Hospitality Cruise Materials Management allows a hacker to gain unauthorized access to protected information.

The vulnerability of the MMS All software component for Oracle Hospitality Cruise Materials Management is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

CVE-2019-3683

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete...

Oracle Hospitality Cruise Materials Management Unauthorized Access Vulnerability

Oracle Hospitality Cruise Materials Management gives shore management complete transparency and control over all consumables required for cruise ship operations. An unspecified vulnerability exists in the MMS All component in Oracle Hospitality Cruise Materials Management 7.30.567. An attacker...

XSS Vulnerability in Microplatform All-in-One System

SenDong Micro platform all-in-one station building system is the first all-in-one station building system based on SAAS architecture. XSS vulnerability exists in SenDong Micro platform all-in-one website builder system, which can be exploited by attackers to obtain website cookie information...

CVE-2020-2599: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications component: MMS All. The supported version that is affected is 7.30.567. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality Cruise Materials...

CVE-2019-6319

The CVE-2019-6319 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in HP DeskJet 3630 All-in-One Printers (models F5S43A–F5S57A, K4T93A–K4T99C, K4U00B–K4U03B, V3F21A–V3F22A) with firmware SWP1FN1912BR or higher. The vulnerability could allow a denial of service or device misconfi...

CVE-2019-6320: Cross-Site Request Forgery (CSRF)

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6319: Cross-Site Request Forgery (CSRF)

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

PT-2020-1562

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 19.4R1 Description A Local File Inclusion issue in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. The vulnerabilit...

All K Song has a dll hijacking vulnerability

All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...

Micro Focus AcuToWeb Information Disclosure Vulnerability

Micro Focus AcuToWeb is a suite of web and mobile deployment solutions for ACUCOBOL applications from Micro Focus UK. An information disclosure vulnerability exists in Micro Focus AcuToWeb all supported versions. An attacker could exploit this vulnerability to enumerate files on the file system...