DomainMOD cross-site scripting vulnerability (CNVD-2019-07968)

DomainMOD is an open source application for managing your domain names and other Internet assets in a central location. A cross-site scripting vulnerability exists in DomainMOD versions 4.11.01 and earlier, which can be exploited by an attacker via the assets/edit/host.php Web Host Name or Web Ho...

CVE-2018-19915

CVE-2018-19915 affects DomainMOD up to version 4.11.01. The vulnerability is a stored XSS via the assets/edit/host.php Web Host Name or Web Host URL fields, allowing execution of arbitrary JavaScript in an authenticated user context and potentially session-related impacts. The issue is documented...

CVE-2018-19915

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

CVE-2018-19915: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

PT-2018-15162

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS attacks via the assets/edit/host.php Web Host Name or Web Host URL field. Recommendations For DomainMOD versions prior to 4.11.02, update to version 4.11.02 or later to...

PT-2018-16265 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17 Description: A buffer overflow issue exists in the credentials handler of the video-core's HTTP server. The video-core process incorrectly extracts the videoHostUrl field from a...