CVE-2005-2350

Cross-site scripting XSS vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface...

CVE-2005-2350

Cross-site scripting XSS vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface...

Apple iOS < 13.2 Multiple Vulnerabilities

Binary data appleios132check.nbin...

IBM Navigator for i Cross-Site Scripting Vulnerability (CNVD-2019-39762)

IBM Navigator for i is a console interface used in IBMi for performing and managing critical tasks in IBMi from IBM USA. A cross-site scripting vulnerability exists in IBM Navigator for i, which can be exploited by remote attackers to inject arbitrary JavaScript code into the Web UI...

KLA11714 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Cross-origin data leak vulnerability can be exploited to arbitrary code executio...

Mysterious malware that re-installs itself infected over 45,000 Android Phones

Over the past few months, hundreds of Android users have been complaining online of a new piece of mysterious malware that hides on the infected devices and can reportedly reinstall itself even after users delete it, or factory reset their devices. Dubbed Xhelper, the malware has already infected...

chromium-browser: Full screen notification overlap

UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page...

CVE-2019-4486

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164070...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2019-39205)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

IBM Cloud Orchestrator Cross-Site Scripting Vulnerability

IBM Cloud Orchestrator is a suite of cloud management solutions from IBM in the United States. The program provides extended internal and external deployment of cloud services and application program interfaces and tools to extend the integration with existing environments and other functions. A...

KLA11589 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Heap buffer overflow...

CVE-2019-15270

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

cc.akkaha:asura-play_2.12 (>=0.5.0 <=0.6.0), cc.akkaha:pea_2.12 (>=0.1.0 <=0.5.0) +222 more potentially affected by CVE-2019-17495 via org.webjars:swagger-ui (>=2.0.17 <=3.23.0)

org.webjars:swagger-ui MAVEN version =2.0.17, =0.5.0, =0.1.0, =3.2.3, =0.0.1, =0.5.0, =0.19.0, =0.20.0, =0.19.0, =0.19.0, =0.19.0, =1.0.0-beta-21, =1.0.0-beta-21, =0.1.1, =0.229, =0.229, =0.269 and more Source cves: CVE-2019-17495 Source advisory: OSV:GHSA-C427-HJC3-WRFW...

Oracle E-Business Suite CVE-2019-2942 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in Oracle Advanced Outbound Telephony. The vulnerability can be exploited over the 'HTTP' protocol. The 'User Interface' component is affected. This vulnerability affects the following supported versions: 12.1.1 throu...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2019-34597)

IBM Jazz Reporting Service JRS is a set of ready-to-use reporting components. The product includes functionality for report generation, data collection, and lifecycle queries. A cross-site scripting vulnerability exists in IBM JRS, which can be exploited by remote attackers to inject arbitrary...

Apple macOS, iCloud for Windows and iTunes for Windows UIFoundation Component Buffer Overflow Vulnerability

Apple iTunes for Windows and others are products of Apple Inc.Apple iTunes for Windows is a media player application based on the Windows platform.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc. Apple...

Cisco Firepower Management Center Operating System Command Injection Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An operating system command injection vulnerability exists in the Web UI of Cisco Firepower Management Center, which stems from the program's failure to adequately validate user input...

Cisco Firepower Management Center Buffer Overflow Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A buffer overflow vulnerability exists in the Web UI in Cisco Firepower Management Center that stems from inadequate input validation. A remote attacker could exploit the vulnerability by...

The vulnerability of the Web UI of the software-hardware management solution for Cisco Firepower Management Center allows a perpetrator to execute arbitrary commands on a vulnerable device.

The vulnerability of the Web UI of the Cisco Firepower Management Center’s network security management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable device remotely...

The vulnerability of the Web UI of the software-hardware management solution for Cisco Firepower Management Center allows a perpetrator to execute arbitrary commands on a vulnerable device.

The vulnerability of the Web UI of the Cisco Firepower Management Center’s network security management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable device remotely...