85 matches found
CVE-2020-36608: Improper Neutralization
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
PT-2022-15300 · Huawei · Hwlog
Name of the Vulnerable Software and Affected Versions: Huawei HWLog affected versions not specified Description: The DFX module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect system stability. Recommendations: At the moment, there is no informatio...
CVE-2020-24038
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
Information disclosure
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
CVE-2020-24038
CVE-2020-24038 affects myFax version 229, where the export log module logs sensitive information, enabling access to critical data by any user. The Red Hat, CNVD, CNNVD and related records corroborate an information disclosure flaw rooted in the export logging, resulting in exposure of sensitive ...
CVE-2020-24038
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
CVE-2020-24038: Insertion of Sensitive Information into Log File
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
MyFax 日志信息泄露漏洞
myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...
GHSA-H58V-C6RF-G9F7 Cross site scripting in the system log
Impact It is possible to inject code into the tllog table that will be executed in the browser when the system log is called in the back end. Patches Update to Contao 4.9.16 or 4.11.5. Workarounds Disable the system log module in the back end for all users especially admin users. References...
SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability
SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...
CVE-2019-18665
The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...
CVE-2019-18664
The Log module in SECUDOS DOMOS before 5.6 allows XSS...
CVE-2019-18665
The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...
CVE-2019-18664
The Log module in SECUDOS DOMOS before 5.6 allows XSS...
Cross site scripting
The Log module in SECUDOS DOMOS before 5.6 allows XSS...
Design/Logic Flaw
The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...
CVE-2019-18664
The Log module in SECUDOS DOMOS before 5.6 allows XSS...
CVE-2019-18664
The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...