Discourse < 2.5.0.beta2 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2020-21071)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Discourse < 2.4.0.beta5 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

topminis.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1120081 Security Researcher haxmov Helped patch 708 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting topminis.com.br website and i...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19905)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19904)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of proper...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20975)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the URI path of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a denial of service and execute arbitrary...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20974)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the 'arg4' and 'arg9' parameters of some functions of the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a...

Swisscom Centro Grande Cross-Site Scripting Vulnerability

The Swisscom Centro Grande is a router from Swisscom, Switzerland. A cross-site scripting vulnerability exists in Swisscom Centro Grande versions prior to 6.16.12, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerabilit...

Kyocera ECOSYS M5526cdw Buffer Overflow Vulnerability (CNVD-2020-20980)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A vulnerability exists in the 'okhtmlfile' and 'failhtmlfile' for some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701. parameter have a buffer overflow vulnerability The vulnerabili...

Kyocera ECOSYS M5526CDW Path Traversal Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A path traversal vulnerability in the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which arises from a failure of a networked system or product to properly filter for special elements in the path...

Kyocera ECOSYS M5526cdw Integer Overflow Vulnerability

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. An integer overflow vulnerability in the 'arg3' parameter of some functions of the web application in the Kyocera ECOSYS M5526cdw version 2R72000.001.701 can be exploited by an attacker to cause the device to crash or...

Wyse Management Suite Cross-Site Scripting Vulnerability

Wyse Management Suite WMS is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A cross-site scripting vulnerability exists in Wyse Management Suite versions...

Fortinet FortiADC Cross-Site Scripting Vulnerability

Fortinet FortiADC is an application delivery controller. A cross-site scripting vulnerability exists in Fortinet FortiADC 5.3.3 and earlier versions. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability t...

Kyocera ECOSYS M5526cdw Cross-Site Scripting Vulnerability (CNVD-2020-20976)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A cross-site scripting vulnerability in the Web application in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which stems from a lack of proper validation of client-side data in the WEB application, can be exploited ...

CVE-2019-19821

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

Authentication flaw

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

CVE-2019-19821

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages...

CVE-2019-19821

CVE-2019-19821 affects the Combodo iTop web application. A post‑authentication privilege escalation allows regular authenticated users to access and modify information with administrative privileges due to improper handling of HTTP Location header in server responses. Mitigation per sources is to...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-17384)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions 12.1 through 12.8.1, which stems fro...