CVE-2019-3804

The CVE-2019-3804 issue affects cockpit prior to version 184, where glib’s base64 decode path is mishandled, allowing an unauthenticated attacker to send a crafted request with an invalid base64-encoded cookie and crash the web service (denial of service). Public documents consistently reference ...

CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

CVE-2019-7421

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

CVE-2019-7421

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7421

CVE-2019-7421 affects Samsung X7400GX SyncThru Web Service (Firmware V6.A6.25, Main Firmware V11.01.05.25_08-21-2015). The vulnerability is a cross-site scripting flaw in the web interface, with the XSS vector disclosed in multiple parameters of /sws.login/gnb/loginView.sws (contextpath and based...

CVE-2019-7420

CVE-2019-7420 affects SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in the web UI, exposed via the tabName parameter of /sws.application/information/networkinformationView.sws (per the NVD entry). This ind...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7419

CVE-2019-7419 affects Samsung SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in /sws/leftmenu.sws affecting parameters ruiFw_id, ruiFw_pid, and ruiFw_title. Root cause is XSS, enabling script injection in t...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7418

The CVE-2019-7418 entry concerns a cross-site scripting (XSS) vulnerability in Samsung X7400GX SyncThru Web Service. The affected component is the web interface (/sws/swsAlert.sws) of Samsung X7400GX SyncThru Web Service firmware version V6.A6.25 / V11.01.05.25_08-21-2015. The root cause is refle...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...