Cross site scripting

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...

Cross site scripting

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2017-8332

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...

CVE-2017-8334

CVE-2017-8334 affects Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. The vulnerability stems from failing to implement protection against cross-site scripting forgery in the web management interface, enabling an attacker to lure a logged-in admin/user into executing a...

CVE-2017-8334

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2017-8328

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...

CVE-2017-8328

The CVE-2017-8328 entry describes a CSRF flaw in Securifi Almond/Almond+ (2015) firmware AL-R096 where an attacker can coerce a logged-in user to change a password via the web management interface due to the absence of CSRF protection. Connected sources (NVD/CNVD/CVE records) confirm that the vul...

PT-2019-8619

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description An issue was discovered where the device does not implement any cross-site scripting protection mechanism. This allows an attacker to trick a user who is logge...

PT-2019-8621

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description An issue was discovered where the device does not implement any cross-site scripting forgery protection mechanism. This allows an attacker to trick a user who ...

PT-2019-8624

Name of the Vulnerable Software and Affected Versions Securifi Almond version AL-R096 Securifi Almond+ version AL-R096 Securifi Almond 2015 version AL-R096 Description The issue allows an attacker to exploit the lack of Origin header check on the web management interface. This enables the attacke...

PT-2019-8615

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description The issue concerns the lack of cross-site request forgery protection on the web management interface, allowing an attacker to trick a logged-in user into...

CVE-2017-8334: Cross-Site Request Forgery (CSRF)

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2017-8332: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...

CVE-2017-8328: Cross-Site Request Forgery (CSRF)

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...

CVE-2017-9381

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

Cross site request forgery (csrf)

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

PT-2019-8650

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered where the device does not implement any cross-site request forgery protection mechanism. This allows an attacker to trick a user who navigates to an...

CVE-2017-9381: Cross-Site Request Forgery (CSRF)

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability (CNVD-2019-24847)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...