CVE Vulnerability Catalog

A SQL injection vulnerability was found in code-projects Student Result Manager 1.0 in the file src/students/Database.java. Manipulating the roll/name/gpa arguments allows remote attack. The exploit has been publicly disclosed and may be used.

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.

A Cross Site Scripting (XSS) vulnerability was found in the Subject Description field of code-projects Simple Scheduling System 1.0. It allows injection of malicious JavaScript code into the page.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS Evolved could be used to elevate privileges and/or execute unauthorized commands. When an attacker executes crafted CLI commands, the options are processed via a script in some cases. These scripts are not hardened so injected commands might be executed via the shell, which allows an attacker to perform operations, which they should not be able to do according to their assigned permissions. This issue affects Junos OS Evolved: 24.2 versions before 24.2R2-S2-EVO, 24.4 versions before 24.4R2-EVO. This issue does not affect Junos OS Evolved versions earlier than 24.2R1-EVO.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

Junos Space before version 24.1R4 contains an XSS vulnerability that allows an attacker to inject script tags on the Generate Report page. When another user visits this page, the attacker can execute commands with the target's permissions, including administrator.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlets pages. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Configuration View page. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Management pages. When visited by another user, including an administrator, the attacker can execute commands with the target's permissions. This issue affects all versions of Junos Space before 24.1R4.

Junos Space before version 24.1R4 contains an XSS vulnerability that allows an attacker to inject script tags on template creation pages. When another user visits these pages, the attacker can execute commands with the target's permissions, including administrator.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.