7420 matches found
CVE-2018-20724: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...
CVE-2018-20726: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability exists in host.php via tree.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices...
Man-in-the-middle Attack
Git is vulnerable to man-in-the-middle attack. The SSL X.509 v3 certificate validation on the IMAP server's certificate does not check that the server's hostname matched the one provided in the CN field of the server's certificate...
PT-2019-10182
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting XSS issue exists due to the lack of escaping of unintended characters in the Website Hostname for Data Collectors. This occurs in the pollers.php file. Recommendations: For...
PT-2019-10184
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting XSS issue exists due to the lack of escaping of unintended characters in the Website Hostname field for Devices, which can be accessed via tree.php in host.php. Recommendations...
CVE-2018-6333
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...
CVE-2018-6333
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...
CVE-2018-6333
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...
PT-2018-17483
Name of the Vulnerable Software and Affected Versions Nuclide versions prior to 0.290.0 Description The issue concerns the hhvm-attach deep link handler in Nuclide, which did not properly sanitize the provided hostname parameter when rendering. This could allow a malicious URL to render HTML and...
Node.js Multiple Vulnerabilities (November 2018 Security Releases)
The version of Node.js installed on the remote host is 6.x prior to 6.15.0, 8.x prior to 8.14.0 or 10.x prior to 10.14.0 or 11.x prior to 11.3.0. It is, therefore, affected by multiple vulnerabilities. - OpenSSL Timing vulnerability in DSA signature generation CVE-2018-0734. - OpenSSL Timing...
Security Bulletin: Potential MITM attack in Apache CXF used by WebSphere Application Server affects IBM Operations Analytics - Log Analysis (CVE-2018-8039)
Summary There is a potential man-in-the-middle attack in Apache CXF used by WebSphere Application Server CVE-2018-8039 Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not wor...
TP-Link TD-W8961ND Cross-Site Scripting Vulnerability
The TP-Link TD-W8961ND is a wireless router from China P&L TP-LINK. A cross-site scripting vulnerability exists in the TP-Link TD-W8961ND, which can be exploited by a remote attacker to inject malicious code into the current list of the DHCP client with the help of the hostname of the DHCP client...
CVE-2018-20372
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...
Cross site scripting
Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...
CVE-2018-20372
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...
Design/Logic Flaw
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...
CVE-2018-20372
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...
CVE-2018-20373
The CVE-2018-20373 entry affects Tenda ADSL modem routers (version 1.0.1) and is caused by a cross-site scripting (XSS) vulnerability triggered via the hostname of a DHCP client. The connected records corroborate: Cross-site scripting vulnerability in Tenda ADSL modem routers 1.0.1; exploitation ...