Lucene search
K

10 matches found

Positive Technologies
Positive Technologies
added 2023/09/07 12:0 a.m.2 views

PT-2023-5300 · Unknown · Modulys Gp

Name of the Vulnerable Software and Affected Versions: MODULYS GP MOD3GP-SY-120K affected versions not specified Description: The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be...

10CVSS7.3AI score0.00105EPSS
Exploits0References10
VulnCheck KEV
VulnCheck KEV
added 2021/04/12 12:0 a.m.0 views

VulnCheck KEV: CVE-2013-7389

Multiple cross-site scripting XSS vulnerabilities in D-Link DIR-645 Router Rev. A1 with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the 1 deviceid parameter to parentalcontrols/bind.php, 2 RESULT parameter to info.php, or 3 receiver...

4.3CVSS5.8AI score0.92227EPSS
Exploits1References1
CNVD
CNVD
added 2018/03/07 12:0 a.m.1 views

D-Link DIR Series Cross-Site Scripting Vulnerability (CNVD-2018-06629)

D-Link DIR-868L and others are wireless router products from AUO D-Link. A cross-site scripting vulnerability exists in the htdocs/webinc/body/bscsmssend.php file in the D-Link DIR-868L, DIR-865L, and DIR-860L. A remote attacker can exploit the vulnerability by sending a specially crafted...

6.1CVSS6.3AI score0.00632EPSS
Exploits1References1
NVD
NVD
added 2018/03/06 8:29 p.m.12 views

CVE-2018-6528

XSS vulnerability in htdocs/webinc/body/bscsmssend.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver...

6.1CVSS5.9AI score0.00632EPSS
Exploits1References4
OSV
OSV
added 2018/03/06 8:29 p.m.2 views

CVE-2018-6528

XSS vulnerability in htdocs/webinc/body/bscsmssend.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver...

6.1CVSS5.8AI score
Exploits0References4
Cvelist
Cvelist
added 2018/03/06 8:0 p.m.15 views

CVE-2018-6528

XSS vulnerability in htdocs/webinc/body/bscsmssend.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver...

5.9AI score0.00632EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2018/01/13 12:0 a.m.2 views

PT-2018-4007 · D Link · D-Link Dir-868L +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L versions prior to DIR860LA1 FW110b04 D-Link DIR-865L versions prior to DIR-865L REVA FIRMWARE PATCH 1.08.B01 D-Link DIR-868L versions prior to DIR868LA1 FW112b04 Description: The issue is related to improper input validation i...

6.4CVSS6AI score0.00632EPSS
Exploits1References9
CNVD
CNVD
added 2015/09/27 12:0 a.m.1 views

Mozilla Firefox js/src/proxy/Proxy.cpp Restriction Bypass Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox js/src/proxy/Proxy.cpp file fails to properly handle the 'receiver' parameter. A remote attacker can exploit the vulnerability to bypass specific window access restrictions...

4.3CVSS8.9AI score0.00775EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2014/07/07 12:0 a.m.2 views

PT-2014-3413 · D Link · D-Link Dir-645 Router

Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 Router Rev. A1 with firmware prior to 1.04B11 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the deviceid parameter to the "parentalcontrols/bind.php" endpoint, t...

4.3CVSS6.6AI score0.92227EPSS
Exploits1References8
Cvelist
Cvelist
added 1999/09/29 4:0 a.m.15 views

CVE-1999-0196

websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter $VARreceiver variable...

7.5AI score0.06994EPSS
Exploits0References2
Rows per page
Query Builder