Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

netqmail qmail-verify Data Compromise

The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

EKOM-3000 Data Collection DoS

The vulnerability of the ECOOM-3000 data collection and transmission device exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to temporarily disrupt the web service of the device’s operation...

Panasonic Video Insight VMS Code Execution

The vulnerability of Panasonic Video Insight VMS software lies in the insufficient verification of data provided by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted malicious request...

Google Chrome Payment Security Policy Data Compromise

The vulnerability of Google Chrome’s payment security policy is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

Xen Hypervisor Input Verification

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

Xen Hypervisor Input Verification

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

Google Chrome Extension Input Verification DoS

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure through the created HTML page...

Blink Google Chrome Data Verification

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

CVE-2020-10831: Insufficient Verification of Data Authenticity

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsung ID is SVE-2019-16013 March 2020...

finisterenord.unblog.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112416 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting finisterenord.unblog.fr...

Desigo PX Web Service DoS

The vulnerability of the microprogramming software for Desigo PX is related to incorrect verification of input data by the PX Web service port TCP/80. Exploiting this vulnerability can allow an attacker to cause service failures...

libopenmpt_modplug Buffer Overflow DoS

The vulnerability of the ModPlugInstrumentName and ModPlugSampleName functions libopenmptmodplug.c in the library for handling modular music allows for errors during the verification of data provided by users before they are copied to a fixed-size buffer. Exploiting this vulnerability enables an...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

Ghostscript Code Execution

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...

NX-API DoS

The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Integrated Management Controller Command Execution

The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves errors during the verification of data entered by the user in the Certificate Request Service function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with ro...

SKS Keyserver GnuPG Certificate Verification Failure

The vulnerability of the network software SKS Keyserver and the information encryption and digital signatures generation programs of GNU Privacy Guard GnuPG is related to the lack of verification of host data in the certificates. Exploiting this vulnerability could allow a malicious actor to caus...

Cisco Small Business Router Input Validation DoS

The vulnerability of Cisco Small Business router microprogramming software of models Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending malicious...