CVE-2019-15244 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

laravel-bjyblog cross-site scripting vulnerability

laravel-bjyblog is an open source personal blog system. A cross-site scripting vulnerability exists in laravel-bjyblog version 6.1.1, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-side code...

Jiangnan Online Judge Cross-Site Scripting Vulnerability (CNVD-2019-36852)

Jiangnan Online Judge is an online evaluation system for computer programming. The system is mainly used for compiling and executing the source code submitted by users and checking the correctness of the program source code. A cross-site scripting vulnerability exists in Jiangnan Online Judge...

WordPress htaccess plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. htaccess is an access control plugin used in it. A cross-site scripting vulnerability exists in the WordPress htaccess plugin versions...

cPanel cross-site scripting vulnerability (CNVD-2019-34456)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM SSL Storage Manager interface in versions of cPanel prior to 82.0.15. The...

CVE-2019-10499

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

Input validation

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

CVE-2019-2333

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM965...

CVE-2019-10499

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

Adobe ColdFusion Multiple Vulnerabilities (APSB19-47)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion"; if...

Joomla! cross-site scripting vulnerability (CNVD-2020-12779)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! The vulnerability stems from a lack of proper validation of client-side data in the WEB...

Atlassian JIRA 7.7.x < 7.13.1 XSS vulnerability (JRASERVER-69238)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.13.1. It is therefore, potentially affected by a cross-site scripting XSS vulnerability in the cyclePeriod parameter due to improper validation of user-supplied input data. ...

DOMPurify Cross-Site Scripting Vulnerability

DOMPurify is a DOM Document Object Model written in JavaScript for HTML, MathML and SVG. A cross-site scripting vulnerability exists in versions of DOMPurify prior to 2.0.1, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker...

Security Advisory - Improper Validation Vulnerability in Several Smartphones

There is an improper validation vulnerability on several smartphones. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model , successful exploit could allow the attacker to get an...

WordPress ScoreMe theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ScoreMe theme is a theme plugin used to build sites with user ratings. A cross-site scripting vulnerability exists in WordPress ScoreMe...

PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2019-35827)

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A cross-site scripting vulnerability exists in the admin/infoclassupdate.php file in version 5.6 of PHPMyWind, which stems from the lack of proper validation of client-side data in the WEB applicati...

IBM WebSphere Portal XSS Vulnerability (CVE-2018-1444)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

IBM WebSphere Portal XSS Vulnerability (CVE-2018-1483)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

WordPress subscriber plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. subscriber plugin is a subscription management plugin used in it. A cross-site scripting vulnerability exists in WordPress subscriber...

WordPress woocommerce-product-addon plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woocommerce-product-addon plugin is a product specification selection plugin for e-commerce used in it. A cross-site scripting...