48 matches found
EUVD-2018-1533
Malware in sbrugna...
EUVD-2018-1534
Malware in sbrugna...
EUVD-2021-15459
Malware in sbrugna...
EUVD-2021-15463
Malware in sbrugna...
CVE-2021-28803
This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...
CVE-2021-28803
CVE-2021-28803 is a Stored XSS vulnerability in QNAP QCenter, affecting versions prior to 1.11.1004. The issue stems from insufficient protection of user data, enabling an attacker to inject and execute client-side script within QCenter. The connected CNVD/CNNVD/CCE-style records describe the sam...
CVE-2021-28803: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...
CVE-2021-28807 Post-Authentication Reflected XSS Vulnerability in Q'center
A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center...
CVE-2018-0724
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...
CVE-2018-0723
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...
Cross site scripting
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...
Cross site scripting
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...
CVE-2018-0723
Affected software : QNAP Q'center Virtual Appliance (version 1.8.1014 and earlier). Vulnerability : Cross-site scripting (XSS) vulnerability that could allow remote attackers to inject JavaScript code into the compromised application. Root cause/tech detail : Not explicitly detailed in the provid...
CVE-2018-0724
CVE-2018-0724 is an XSS vulnerability in QNAP Q'center Virtual Appliance 1.8.1014 and earlier. The issue allows remote attackers to inject JavaScript into the vulnerable application. The affected product is QNAP Q'center Virtual Appliance; no root cause, impact, affected versions beyond those sta...
CVE-2018-0724
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...
CVE-2018-0723
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...
PT-2018-9039
Name of the Vulnerable Software and Affected Versions Q'center Virtual Appliance versions 1.8.1014 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject Javascript code into the compromised application. Recommendations For Q'center Virtual Appliance versions...
PT-2018-9040
Name of the Vulnerable Software and Affected Versions Q'center Virtual Appliance versions 1.8.1014 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject Javascript code into the compromised application. Recommendations For Q'center Virtual Appliance versions...
CVE-2018-0724: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...
CVE-2018-0723: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...