CVE-2019-7424

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to...

CVE-2019-7422

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter...

CVE-2019-7422

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter...

CVE-2019-7423

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...

Cross site scripting

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter...

Cross site scripting

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to...

Cross site scripting

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...

Cross site scripting

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter...

CVE-2019-7425

CVE-2019-7425 concerns Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2. Affected component: the Administration zone file "/netflow/jspui/linkdownalertConfig.jsp" where the task parameter is vulnerable to XSS . The root cause is described as a lack of proper validation of client-side data...

CVE-2019-7425

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter...

CVE-2019-7424

CVE-2019-7424 is an XSS vulnerability in Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2 in the Administration zone (/netflow/jspui/index.jsp). The view parameter or any of the POST parameters (autorefTime, section, snapshot, viewOpt, viewAll, view, groupSelName) can be used to inject sc...

CVE-2019-7424

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to...

CVE-2019-7423

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...

CVE-2019-7423

CVE-2019-7423 affects Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2. The vulnerability is a Cross‑Site Scripting (XSS) in the Administration zone, in /netflow/jspui/editProfile.jsp, through the userName parameter. Root cause: likely improper handling/ sanitization of userName. Document...

CVE-2019-7422

CVE-2019-7422 affects Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2, with an XSS in the Administration zone /netflow/jspui/addMailSettings.jsp via the gF parameter. The connected PoC indicates exploitation of gF to inject script; remediation guidance in the packetStorm post suggests up...

CVE-2019-7422

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter...

The vulnerability of MMSE traffic analyzer detectors in Wireshark allows a hacker to cause a service failure.

The vulnerability of the MMSE discoverer Wireshark/menagerie/menagerie/1847-AradaWSACaptures.cap, a traffic analyzer for computer networks in Wireshark, is related to the locking mechanism of the discoverer. Exploiting this vulnerability can allow a malicious actor to induce a service failure...

Vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email program, related to accessing freed memory cells, allowing attackers to trigger a service failure.

The vulnerability in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird relates to the release of a static flow analyzer object during use. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially crafted HTML5 content with...

Wireshark Null Pointer Dereference Vulnerability (CNVD-2019-18501)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A null pointer dereference vulnerability exists in the TCAP parser in Wireshark versions...

Zoho ManageEngine Netflow Analyzer Cross-Site Scripting Vulnerability (CNVD-2019-05552)

ZOHO ManageEngine Netflow Analyzer is a set of Web-based broadband monitoring tools from ZOHO. A cross-site scripting vulnerability exists in Zoho ManageEngine Netflow Analyzer. No details of the vulnerability are provided at this time...