CVE-2024-31974

The com.solarized.firedown aka Solarized FireDown Browser & Downloader application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately...

CVE-2024-31974

The com.solarized.firedown (Solarized FireDown Browser & Downloader) application version 1.0.76 for Android contains a vulnerability that allows a remote attacker to execute arbitrary JavaScript code via a crafted intent . The root cause is that com.solarized.firedown.IntentActivity uses a WebVie...

UBUNTU-CVE-2018-10060

Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...

DEBIAN-CVE-2018-10060

Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...

PT-2018-9649

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37 Description: The issue arises from the software's failure to properly reject unintended characters, which is related to the use of the sanitize uri function in lib/functions.php. This can lead to a cross-site...

OpenJournal 2.0 Authentication Bypassing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9598/info It has been reported that OpenJournal is prone to an authentication bypass vulnerability. This issue is caused by the application failing to properly sanitize URI specified parameters. Successful exploitation of...