Cybozu Garoon 3.5.0 - 4.6.2 Notification List SQLi Vulnerability

Cybozu Garoon is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...

CVE-2017-7509

CVE-2017-7509 affects the Red Hat Certificate System prior to version 8.1.20-1. Root cause: input validation error in handling of client-provided certificates when the certreq field is missing, triggering an assertion error and causing a denial of service. Impact: denial of service with partial t...

PT-2018-8392

Name of the Vulnerable Software and Affected Versions Red Hat Certificate System versions prior to 8.1.20-1 Description An input validation error exists in the handling of client-provided certificates. If the certreq field is not present in a certificate, an assertion error is triggered, causing ...

Instagram-Clone Script Cross-Site Scripting Vulnerability

Instagram is a photo sharing app.Instagram Clone is open source Instagram clone app for iOS, Android and Web. Provides customization features to integrate app ideas into the Instagram app. A cross-site scripting vulnerability exists in Instagram-Clone Script 2.0, which arises due to an input...

Cybozu Office 10.0.0 - 10.8.0 Multiple Vulnerabilities

Cybozu Office is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:office"; ifdescription...

Canon PrintMe / EFI XSS Vulnerability

Canon PrintMe / EFI software is prone to a cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2018-8235: Origin Validation Error

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge...

CVE-2018-5116: Origin Validation Error

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...

CVE-2018-5109: Origin Validation Error

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This...

CVE-2016-9902: Origin Validation Error

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10...

CVE-2017-7797: Origin Validation Error

Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox 55...

Input Validation Error Vulnerability in Various GE PACSystems Products

PACSystems RX3i CPE305/310,RX3i CPE330,RX3i CPE 400 are programmable automation controller products of GE. An input validation error vulnerability exists in various GE PACSystems products. The vulnerability stems from the device failing to properly validate inputs, allowing a remote attacker to...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-0289

A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An attacker could...

Input validation

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

CVE-2018-10591

CVE-2018-10591 is an origin-validation error affecting Advantech WebAccess family (WebAccess, Dashboard, Scada Node, NMS) prior to specific versions. The issue could let an attacker craft a malicious site, steal session cookies, and access data of authenticated users. Connected documents confirm ...

CVE-2018-10591: Origin Validation Error

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...