224 matches found
CVE-2022-26962
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...
CVE-2022-26962
The Italtel NFV 11.1.2-20210318 software is vulnerable to Multiple Stored XSS within the NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS endpoint. The root cause is the improper neutralization of input through the name , username , or mrfAnnouncementName para...
EUVD-2022-56058
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...
CVE-2022-26962
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...
CVE-2022-26962: Improper Neutralization of Input During Web Page Generation
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...
PT-2026-89584
Name of the Vulnerable Software and Affected Versions Italtel NFV version 11.1.2-20210318 Description Stored Cross-Site Scripting XSS occurs when an application stores unsanitized user input on the server, which is later executed in the browser of another user. The issue exists at the endpoint "N...
CVE-2022-26962
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...
HPESBNW05141 rev.1 - HPE Telco Network Function Virtual Orchestrator, Multiple Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Remote Access, memory corruption, Buffer Overflow, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator v7.7.0 or bel...
CVE-2021-22299
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...
EUVD-2019-10516
Malware in sbrugna...
EUVD-2019-10517
Malware in sbrugna...
EUVD-2019-10530
Malware in sbrugna...
EUVD-2018-1282
Malware in sbrugna...
EUVD-2019-10529
Malware in sbrugna...
EUVD-2019-10503
Malware in sbrugna...
EUVD-2019-10450
Malware in sbrugna...
EUVD-2019-10518
Malware in sbrugna...
EUVD-2020-24636
Malware in sbrugna...