Dell EMC VNX2 Operating Environment for File and VNX1 Operating Environment for File VNX Control Station Cross-Site Scripting Vulnerability

The Dell EMC VNX2 Operating Environment for File and the VNX1 Operating Environment for File are both file storage appliances from Dell, U.S.A. The VNX Control Station is one of these consoles. A cross-site scripting vulnerability exists in the web server error page of the VNX Control Station in...

EMC VNX1 / VNX2 Family Cross Site Scripting Vulnerability

A fix is available for certain versions of VNX Control Station for VNX1 and VNX2 that contain a reflected cross site scripting vulnerability. This vulnerability could potentially be exploited by malicious users to compromise the affected system. Affected includes Dell EMC VNX2 versions prior to...

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...

Synology Photo Station Cross-Site Scripting Vulnerability (Synology_SA_17_80)

Synology Photo Station is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Synology Photo Station is affected by a Cross-Site Scripting (XSS) vulnerability in PixlrEditorHandler.php. The issue allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter in versions earlier than 6.8.0-3456. Root cause: improper handling of the id paramet...

CVE-2017-12072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

PT-2017-12337

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.0-3456 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

stationgarage.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-455711 Description| Value ---|--- Affected Website:| stationgarage.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

SRC-2018-0006 : Synology Photo Station SYNOPHOTO_Flickr_MultiUpload Race Condition File Write Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Synology Photo Station. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

SRC-2018-0005 : Synology Photo Station LogList Stored Cross Site Scripting Authentication Bypass Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Synology Photo Station. User interaction is not required to exploit this vulnerability. The specific flaw exists when parsing html characters in the LogList function. The issu...

Synology File Station Directory Traversal Vulnerability

Synology File Station is a set of file management tools from Synology. The tool enables users to access files on Synology NAS devices via the Web. A directory traversal vulnerability exists in SYNO.FileStation.Extract in Synology File Station versions prior to 1.1.1-0099. A remote attacker can...

Guizhou Eternal Light Science and Technology Co.

Guizhou Eternal Light Technology Co., Ltd. is a high-tech enterprise integrating portal development, network integration, network application, network service, website promotion, software research, software development and system integration. Guizhou Eternal Light Science and Technology Co., Ltd...

About the security content of AirPort Base Station Firmware Update 7.6.9 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Synology Router Manager Path Traversal Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A directory traversal vulnerability exists in SYNO.FileStation.Extract in versions of SRM prior to 1.1.5-6542-4. A remote attacker can exploit this vulnerability to write arbitrary files with th...

About the security content of AirPort Base Station Firmware Update 7.6.9

About the security content of AirPort Base Station Firmware Update 7.6.9 This document describes the security content of AirPort Base Station Firmware Update 7.6.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in AirPort Base Station. An attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Apple security pages for AirPort Base Station Firmware...