29 December 2019

12 results · Feed

• Unscored —
  CVE-2019-20070

  On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blockin…

  Dec 29, 2019
• Unscored —
  CVE-2019-20071

  On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs.

  Dec 29, 2019
• Unscored —
  CVE-2019-20072

  On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).

  Dec 29, 2019
• Unscored —
  CVE-2019-20073

  On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).

  Dec 29, 2019
• Unscored —
  CVE-2019-20074

  On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via…

  Dec 29, 2019
• Unscored —
  CVE-2019-20075

  On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic).

  Dec 29, 2019
• Unscored —
  CVE-2019-20076

  On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Config…

  Dec 29, 2019
• Unscored —
  CVE-2019-20063

  hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.

  libmysofa libmysofa Debian Ubuntu
  Dec 29, 2019
• Unscored —
  CVE-2019-20058

  Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profi…

  Dec 29, 2019
• Unscored —
  CVE-2019-20057

  com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker t…

  Dec 29, 2019
• Unscored —
  CVE-2019-20056

  stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__…

  libsixel libstb libsixel Debian Ubuntu
  Dec 29, 2019
• Unscored —
  CVE-2019-20055

  LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets.

  Dec 29, 2019