PT-2019-3621

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series affected versions not specified Description The issue is related to errors in checking user requests to the web-based management interface. It could allow a remote attacker to cause a denial of service condition on an...

CVE-2019-15251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15252: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15240: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

PT-2019-3503

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

Jiangnan Online Judge Cross-Site Scripting Vulnerability (CNVD-2019-36852)

Jiangnan Online Judge is an online evaluation system for computer programming. The system is mainly used for compiling and executing the source code submitted by users and checking the correctness of the program source code. A cross-site scripting vulnerability exists in Jiangnan Online Judge...

WordPress htaccess plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. htaccess is an access control plugin used in it. A cross-site scripting vulnerability exists in the WordPress htaccess plugin versions...

laravel-bjyblog cross-site scripting vulnerability

laravel-bjyblog is an open source personal blog system. A cross-site scripting vulnerability exists in laravel-bjyblog version 6.1.1, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-side code...

cPanel cross-site scripting vulnerability (CNVD-2019-34456)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM SSL Storage Manager interface in versions of cPanel prior to 82.0.15. The...

CVE-2019-10499

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

Input validation

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

CVE-2019-2333

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM965...

CVE-2019-10499

Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...

CVE-2019-2333: Buffer Copy without Checking Size of Input

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM965...

CVE-2019-11753: Improper Validation of Integrity Check Value

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

Adobe ColdFusion Multiple Vulnerabilities (APSB19-47)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion"; if...

Joomla! cross-site scripting vulnerability (CNVD-2020-12779)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! The vulnerability stems from a lack of proper validation of client-side data in the WEB...

Atlassian JIRA 7.7.x < 7.13.1 XSS vulnerability (JRASERVER-69238)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.13.1. It is therefore, potentially affected by a cross-site scripting XSS vulnerability in the cyclePeriod parameter due to improper validation of user-supplied input data. ...