CVE-2024-3141 Clavister E10/E80 Misc Settings Page MiscSettings cross site scripting

A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability affects unknown code of the file /?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettings of the component Misc Settings Page. The manipulation of the argument...

CVE-2024-3141 Clavister E10/E80 Misc Settings Page MiscSettings cross site scripting

A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability affects unknown code of the file /?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettings of the component Misc Settings Page. The manipulation of the argument...

CVE-2024-3141

CVE-2024-3141 affects Clavister E10/E80 up to 14.00.10. The vulnerability lies in the Misc Settings Page component, specifically the file path related to /?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettings, where manipulation of the arguments WatchdogTimerTime, BufFloodRebootTime...

Clavister E10 和 E80 跨站脚本漏洞

Clavister E10 and Clavister E80 are firewalls from the Swedish company Clavister. A cross-site scripting vulnerability exists in the Clavister E10 and E80, which originates in the component Misc Settings Page, System/AdvancedSettings/DeviceSettings/MiscSettings, which contains unknown code that c...

SUSE CVE-2017-7815

On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiproce...

CVE-2017-7815

On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiproce...

Design/Logic Flaw

On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiproce...

CVE-2017-7815

On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiproce...

e10-findemployers.net XSS vulnerability

Open Bug Bounty ID: OBB-453763 Description| Value ---|--- Affected Website:| e10-findemployers.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Mozilla Firefox Installation Spoofing Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Installation is one of the installation and configuration programs. A security vulnerability exists in Mozilla Firefox installation in versions prior to Mozilla Firefox 56. The vulnerability can be...