Real Time Automation Cross-Site Scripting Vulnerability

Real Time Automation 460 Series is a series of gateways from Real Time Automation, Inc. A cross-site scripting vulnerability exists in Real Time Automation 460 Series versions prior to v8.9.8 that stems from an improper neutralization of input during 1 web page generation, allowing an attacker to...

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Arbitrary Code Execution

Jetty-servlets is vulnerable to Arbitrary Code Execution. The vulnerability is due to insecure escaping of user input which can result in the execution of arbitrary commands. This vulnerability occurs in the CGI servlet handler through the getRuntime.exec method...

USN-6380-1: Node.js vulnerabilities

Rogier Schouten discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu...

CVE-2023-4676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS. This issue affects MedasPro: before 28...

PT-2023-30190

Name of the Vulnerable Software and Affected Versions Yordam MedasPro versions prior to 28 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

USN-6356-1: OpenDMARC vulnerabilities

Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC incorrectly handled certain inputs. If a user or an automated system were tricked into receiving crafted inputs, an attacker could possibly use this to falsify the domain of an e-mails origin. CVE-2020-12272 Patrik Lantz discovere...

CVE-2023-3374

Incomplete List of Disallowed Inputs vulnerability in Unisign Bookreen allows Privilege Escalation.This issue affects Bookreen: before 3.0.0...

USN-6313-1: FAAD2 vulnerabilities

It was discovered that FAAD2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. CVE-2021-32272, CVE-2021-32273, CVE-2021-32274, CVE-2021-32277,...

PT-2023-8509 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.4.2596 build 20231128 QuTS hero versions prior to h5.1.4.2596 build 20231128 QuTScloud versions prior to c5.1.5.2651 Description: The issue is related to a lack of measures to neutralize special elements used in the...

CVE-2023-3705

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

CVE-2023-3705

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

Input validation

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

CVE-2023-3705

CVE-2023-3705 affects CP-Plus NVR and is caused by improper input handling in the web-based management interface. An unauthenticated remote attacker can send specially crafted HTTP requests to the vulnerable device, potentially exposing sensitive information. The vulnerability is rated HIGH (CVSS...

CP-Plus DVR 安全漏洞

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from improper input handling, which allows an unauthenticated, remote attacker to obtain sensitive information on a target device by sending a specially crafted HTTP request to the...

PT-2023-25772 · Unknown · Cp-Plus Nvr

Name of the Vulnerable Software and Affected Versions: CP-Plus NVR affected versions not specified Description: The issue exists due to improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this by sending specially...

PT-2023-29399 · Gerbv +4 · Gerbv +4

Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.4.0 through 2.10.0 Description: A user able to control file input to Gerbv can cause a crash and denial-of-service with a specially crafted Gerber RS-274X file. Recommendations: For Gerbv versions 2.4.0 through 2.10.0, update...

SUSE-SU-2023:3397-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853 - Don't pass zero length input to EVPCipher because s390x assembler optimized AES cannot handle zero size. bsc1213517...

USN-6304-1 inetutils vulnerabilities

It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS CVE-2022-39028 It was discovered that Inetutils incorrectly handled certain inputs. An...

USN-6298-1 zziplib vulnerabilities

Liu Zhu discovered that ZZIPlib incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. CVE-2018-7727 YiMing Liu discovered that ZZIPlib incorrectly...