DEBIAN-CVE-2018-20724

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

UBUNTU-CVE-2018-20724

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

UBUNTU-CVE-2018-20726

A cross-site scripting XSS vulnerability exists in host.php via tree.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices...

CVE-2018-20726

A cross-site scripting XSS vulnerability exists in host.php via tree.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices...

CVE-2018-20724

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

CVE-2018-20724

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

CVE-2018-20726

CVE-2018-20726 affects Cacti (pre-1.2.0) with an XSS in host.php (via tree.php) due to missing escaping in the Website Hostname field for Devices. Exploitation details are not provided in the documents, but multiple advisories note this CVE alongside others and document remediation: upgrade to Ca...

Man-in-the-middle Attack

Git is vulnerable to man-in-the-middle attack. The SSL X.509 v3 certificate validation on the IMAP server's certificate does not check that the server's hostname matched the one provided in the CN field of the server's certificate...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

Node.js Multiple Vulnerabilities (November 2018 Security Releases)

The version of Node.js installed on the remote host is 6.x prior to 6.15.0, 8.x prior to 8.14.0 or 10.x prior to 10.14.0 or 11.x prior to 11.3.0. It is, therefore, affected by multiple vulnerabilities. - OpenSSL Timing vulnerability in DSA signature generation CVE-2018-0734. - OpenSSL Timing...

Security Bulletin: Potential MITM attack in Apache CXF used by WebSphere Application Server affects IBM Operations Analytics - Log Analysis (CVE-2018-8039)

Summary There is a potential man-in-the-middle attack in Apache CXF used by WebSphere Application Server CVE-2018-8039 Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not wor...

TP-Link TD-W8961ND Cross-Site Scripting Vulnerability

The TP-Link TD-W8961ND is a wireless router from China P&L TP-LINK. A cross-site scripting vulnerability exists in the TP-Link TD-W8961ND, which can be exploited by a remote attacker to inject malicious code into the current list of the DHCP client with the help of the hostname of the DHCP client...

Cross site scripting

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

Design/Logic Flaw

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20373

The CVE-2018-20373 entry affects Tenda ADSL modem routers (version 1.0.1) and is caused by a cross-site scripting (XSS) vulnerability triggered via the hostname of a DHCP client. The connected records corroborate: Cross-site scripting vulnerability in Tenda ADSL modem routers 1.0.1; exploitation ...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

PT-2018-15328 · Tp Link · Tp-Link Td-W8961Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TD-W8961ND affected versions not specified Description: The issue allows for cross-site scripting XSS attacks via the hostname of a DHCP client. This can be exploited by changing a device's hostname to an XSS payload, which will then ...