5 matches found
CVE-2024-31974
The com.solarized.firedown aka Solarized FireDown Browser & Downloader application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately...
CVE-2024-31974
The Solarized FireDown Browser & Downloader (com.solarized.firedown) application version 1.0.76 for Android contains a vulnerability that allows a remote attacker to execute arbitrary JavaScript code via a crafted intent . The root cause is that the com.solarized.firedown.IntentActivity uses a We...
DEBIAN-CVE-2018-10060
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...
UBUNTU-CVE-2018-10060
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...
OpenJournal 2.0 Authentication Bypassing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9598/info It has been reported that OpenJournal is prone to an authentication bypass vulnerability. This issue is caused by the application failing to properly sanitize URI specified parameters. Successful exploitation of...