3059 matches found
CVE-2020-2491
CVE-2020-2491 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station . The CVE applies to QTS/QuTS installations that include Photo Station and can allow remote attackers to inject malicious code via Photo Station components. The included connected documents confirm affected products...
PT-2020-15874 · Qnap · Qts +1
Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.5.1.1456 build 20201015 QuTS hero versions prior to h4.5.1.1472 build 20201031 QTS versions prior to 4.4.3.1354 build 20200702 QTS versions prior to 4.3.6.1333 build 20200608 QTS versions prior to 4.3.4.1368 build...
The vulnerability of the KTS “Lighthouse” web interface, which stems from the lack of measures to sanitize input data, allows a perpetrator to inject any desired web script or HTML code.
The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to inject arbitrary web scripts or HTML code...
The vulnerability of the KTS “Lighthouse” web interface, which stems from the lack of measures to sanitize input data, allows a perpetrator to inject any desired web script or HTML code.
The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to inject arbitrary web scripts or HTML code...
CVE-2020-5662
Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors...
CVE-2018-19955
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10...
CVE-2018-19956
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10...
CVE-2018-19955
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10...
CVE-2018-19954
CVE-2018-19954 is a cross-site scripting vulnerability in QNAP Systems Inc. Photo Station. Affected versions are Photo Station prior to 5.7.11 and prior to 6.0.10. The issue stems from insufficient input validation in the Web application, enabling remote attackers to inject malicious code if expl...
PT-2020-8659 · Qnap Systems · Music Station
Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Music Station versions prior to 5.1.13 QNAP Systems Inc. Music Station versions prior to 5.2.9 QNAP Systems Inc. Music Station versions prior to 5.3.11 Description: This issue is a cross-site scripting vulnerability that cou...
PT-2020-8661 · Qnap Systems · Photo Station
Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Photo Station versions prior to 5.7.11 QNAP Systems Inc. Photo Station versions prior to 6.0.10 Description: The issue is a cross-site scripting vulnerability that could allow remote attackers to inject malicious code if...
CVE-2018-19953
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on buil...
CVE-2018-19943
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later Q...
CVE-2018-19953
CVE-2018-19953 is a cross-site scripting vulnerability in QNAP NAS File Station affecting multiple QTS releases. The description indicates that, if exploited, remote attackers could inject malicious code. QNAP has issued fixes in several QTS versions (e.g., 4.4.2.1231; 4.4.1.1201; 4.3.6.1218; 4.3...
CVE-2018-19943
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later Q...
The vulnerability of the OLYMPOX educational control system’s web application, which arises from the failure to protect the structure of the web page, allows a hacker to inject arbitrary code.
The vulnerability of the OLYMPOX educational control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...
HPE KVM IP Console Switches Remote Code Injection Vulnerability
HPE KVM IP Console Switches is an HP switch device. A remote code injection vulnerability exists in HPE KVM IP Console Switches, which allows remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary code in an application context...
CVE-2020-5631
CMONOS.JP CMS (version 2.0.20191009 and earlier) contains a stored cross-site scripting (CWE-79) vulnerability. The issue allows an attacker to cause arbitrary script execution in a user’s browser via unspecified vectors. The JVNDB entry notes the vulnerability was fixed in ver2.0.20200916, provi...
