44 matches found
CVE-2019-18661
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...
CVE-2022-23766
An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website...
CVE-2020-7846
Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page...
EUVD-2018-12147
Malware in sbrugna...
EUVD-2020-26118
Malware in sbrugna...
EUVD-2019-13784
Malware in sbrugna...
EUVD-2018-16923
Malware in sbrugna...
EUVD-2019-9163
Malware in sbrugna...
EUVD-2019-13781
Malware in sbrugna...
EUVD-2020-26153
Malware in sbrugna...
EUVD-2009-3526
Malware in sbrugna...
EUVD-2020-25385
Malware in sbrugna...
EUVD-2021-7969
Malicious code in bioql PyPI...
EUVD-2022-46811
Malicious code in bioql PyPI...
EUVD-2022-40969
Malicious code in bioql PyPI...
PT-2025-26727
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 140 Firefox ESR versions prior to 128.12 Description: The issue arises when a file download is specified via the Content-Disposition header, but this directive is ignored if the file is included via an or tag. This...
CVE-2025-1334
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system...
CVE-2024-31906
IBM Automation Decision Services 23.0.2 allows web pages to be stored locally which can be read by another user on the system...
CVE-2023-6542
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL...
CVE-2022-43841
IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078...