CVE-2019-18265

Digital Alert Systems’ DASDEC software prior to version 4.1 is affected by CVE-2019-18265, an XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the login page’s SSH username field or the HTTP Host header. The injected content is stored in logs and rendered ...

CVE-2022-40204

CVE-2022-40204 is an XSS in Digital Alert Systems DASDEC software, affecting all current versions via the Host Header on undisclosed pages after login. The vulnerability is documented across multiple feeds: NVD lists CVSS v3.1 base score 4.1 (I/L, C/N, A/N) with network attack vector, low complex...