CVE-2019-10951

Delta Industrial Automation CNCSoft ScreenEditor (Version 1.00.88 and prior) contains multiple heap-based buffer overflow vulnerabilities triggered by processing specially crafted project files. Root cause: lack of input validation when copying data from project files to the heap, enabling remote...

CVE-2019-10949

CVE-2019-10949 corresponds to multiple out-of-bounds read vulnerabilities in Delta Industrial Automation CNCSoft ScreenEditor (and its DPB file handling) affecting version 1.00.88 and earlier. The root cause is improper validation of user-supplied data when processing DPB project files, enabling ...

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) - Cross-Site Scripting

Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free an...

CVE-2019-1827

A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the service. The vulnerability exists because the Online Hel...

The vulnerability of the Tianocore edk2 library, caused by insufficient validation of user input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the Tianocore edk2 library arises from insufficient validation of the data entered by users. Exploiting this vulnerability can allow a malicious actor to increase their privileges or cause service failures...

IBM MQ 9.0.2 - 9.0.5 / 9.1.0.x < 9.1.0.1 Console Cross Site Scripting (XSS) Vulnerability (CVE-2018-1836)

According to its self-reported version, the IBM MQ server installed on the remote host is 9.0.2 CD - 9.05 CD, or 9.1.0.x LTS 9.1.0.1 LTS, and is therefore affected by a cross site scripting XSS vulnerability in the IBM MQ Web Console due to improper validation of user-supplied input before...

CVE-2019-10061

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

CVE-2019-5722

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number...

Sql injection

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number...

Command injection

An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/ispupdateedit.php does not properly validate user input, which leads to...

Command Injection

Overview Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0. References GitHub Advisory...

CVE-2019-5722

CVE-2019-5722 affects Portier Vision versions 4.4.4.2 and 4.4.4.6 . The issue arises from a lack of user input validation in parameter handling, enabling multiple SQL injections, including on the login form and the search form for a key ring number. Exploitation details are discussed in public ad...

CVE-2019-1702 Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerabilities are due...

CVE-2019-1702

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerabilities are due...

CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script...

CVE-2019-6547

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...

Out-of-bounds

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...

CVE-2019-6547

CVE-2019-6547 affects Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.84 and prior. The root cause is an out-of-bounds read stemming from insufficient validation while processing project/DPB files, leading to crashes and potential information exposure. Public documentation consiste...

CVE-2019-6547

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...