67 matches found
CVE-2013-6786
Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...
CVE-2013-6786
CVE-2013-6786 is an XSS vulnerability in Allegro RomPager prior to 4.51 used on ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D‑Link DSL-2640R/2641R. The flaw arises when the forbidden author header protection is bypassed, allowing remote attackers to inject arbitrary web sc...
CVE-2013-6786: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...
PT-2013-1057
Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.0 through 1.0.0l OpenSSL versions 1.0.1 through 1.0.1f Description The DTLS retransmission implementation in OpenSSL does not properly maintain data structures for digest and encryption contexts. This might allow...
CVE-2008-6297
Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...
CVE-2008-6297: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...
CVE-2006-5378
Technical details about CVE-2006-5378 are not publicly available in the provided documents. The records describe an unspecified vulnerability with unknown impact. Monitor for updates; no file/version specifics or remediation are provided here.