3354 matches found
CVE-2020-8213
An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing...
issues.betasystems.com Cross Site Scripting vulnerability OBB-1238437
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-15721
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...
CVE-2020-15721
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...
GHSA-M93V-9QJC-3G79 Context isolation bypass via leaked cross-context objects in Electron
Impact Apps using contextIsolation are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Workarounds There are no app-side workarounds, you must update your...
GHSA-6VRV-94JV-CRRG Context isolation bypass via Promise in Electron
Impact Apps using contextIsolation are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Workarounds There are no app-side workarounds, you must update your...
PT-2020-6869 · D Link · D-Link Dir-878 +2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-867-US, DIR-878, DIR-882-US versions 1.20B10 BETA Description: The issue is related to the implementation of the HNAP protocol in the firmware of D-Link routers, which allows an attacker to bypass authentication procedures by...
CVE-2019-20831
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...
CVE-2019-20831
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...
D-Link DIR-865L Security Feature Issue Vulnerability
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security feature issue vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which stems from the pseudo-random number generator using an easily guessable seed. No details of the vulnerability are provided...
D-Link DIR-865L Encryption Problem Vulnerability
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A vulnerability with encryption issues exists in D-Link DIR-865L Ax version 1.20B01 Beta. A remote attacker can exploit the vulnerability to obtain sensitive information...
D-Link DIR-865L Information Disclosure Vulnerability (CNVD-2020-33169)
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in D-Link DIR-865L Ax version 1.20B01 Beta, which originates from the program storing sensitive information in plaintext form. An attacker can exploit this vulnerability to...
CVE-2020-13783
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...
CVE-2020-13785
D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...
CVE-2020-13786
D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...
CVE-2020-13784
D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...
CVE-2020-13782
D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection...
Information disclosure
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...
CVE-2020-13784
CVE-2020-13784 concerns the D-Link DIR-865L Ax router with firmware 1.20B01 Beta, where the pseudo-random number generator uses a predictable seed. The connected CNVD entry confirms a security feature issue vulnerability for the same device/firmware, citing the easily guessable PRNG seed as the u...