947 matches found
Siemens SCALANCE W 1750D
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE W 1750D Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...
w-lion92.ru Cross Site Scripting vulnerability OBB-1456603
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kyuhnia-s-yuredi-nardi-w.123tehnika.com Cross Site Scripting vulnerability OBB-1398593
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...
Important: Red Hat Security Advisory: qemu-kvm-ma security update
An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
h-w-ferienwohnung.de Cross Site Scripting vulnerability OBB-1322949
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
w-hobby.com Cross Site Scripting vulnerability OBB-1318744
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of Cisco Virtual Wide Area Application Services software for ENCS 5400-W and CSP 5000-W devices, which stems from the use of pre-installed registration data, allows a perpetrator to increase their privileges.
The vulnerability of Cisco Virtual Wide Area Application Services software for ENCS 5400-W and CSP 5000-W devices is related to the use of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
CVE-2020-16210
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16206
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16208
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16204
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...
Cross site scripting
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...
Cross site request forgery (csrf)
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...
Cross site scripting
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16204
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16204
CVE-2020-16204 affects Red Lion N-Tron 702-W and 702M12-W (all versions). The vulnerability stems from an undocumented interface on the device that could allow an attacker to execute commands as root. Public sources place the risk with high impact (NVD CVSSv3 base 9.8; NETWORK, NONE USER interact...
CVE-2020-16210
CVE-2020-16210 affects Red Lion N-Tron 702-W / 702M12-W (all versions). The vulnerability is a reflected cross‑site scripting flaw in the Web UI that may allow an attacker to execute arbitrary code in the context of an authenticated user, potentially enabling remote control of the device. CVSS v3...
CVE-2020-16210
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...
CVE-2020-16208
CVE-2020-16208 affects Red Lion N-Tron 702-W / 702M12-W. The vulnerability is Cross-Site Request Forgery (CSRF) that could allow an attacker to modify device configurations by luring an authenticated user to click a crafted link. NVD lists CVSSv3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...