|
213871
|
6.1 |
MEDIUM
Network
|
samsung
|
syncthru_web_service x7400gx_firmware
|
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7421
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213872
|
6.1 |
MEDIUM
Network
|
samsung
|
syncthru_web_service x7400gx_firmware
|
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7420
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213873
|
6.1 |
MEDIUM
Network
|
samsung
|
syncthru_web_service x7400gx_firmware
|
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7419
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213874
|
6.1 |
MEDIUM
Network
|
samsung
|
syncthru_web_service x7400gx_firmware
|
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7418
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213875
|
6.1 |
MEDIUM
Network
|
ericsson
|
active_library_explorer
|
XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7417
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213876
|
6.1 |
MEDIUM
Network
|
opentext
|
documentum_webtop
|
XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.
|
CWE-79 CWE-601
Cross-site Scripting Open Redirect
|
CVE-2019-7416
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213877
|
8.8 |
HIGH
Network
|
zyxel
|
dsl-491hnu-b10b_firmware dsl-491hnu-b1b_v2_firmware
|
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2019-7391
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213878
|
6.5 |
MEDIUM
Network
|
kaiostech nokia
|
kaios 8810_4g_firmware
|
A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the …
|
NVD-CWE-noinfo
|
CVE-2019-7386
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213879
|
7.8 |
HIGH
Local
|
raisecom
|
iscom_ht803g-u_firmware iscom_ht803g-w_firmware iscom_ht803g-1ge_firmware iscom_ht803g_gpon_firmware
|
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1…
|
CWE-78
OS Command
|
CVE-2019-7385
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213880
|
7.8 |
HIGH
Local
|
raisecom
|
iscom_ht803g-u_firmware iscom_ht803g-w_firmware iscom_ht803g-1ge_firmware iscom_ht803g_gpon_firmware
|
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1…
|
CWE-78
OS Command
|
CVE-2019-7384
|
2024-11-21 13:48 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|