4363 matches found
Debian DLA-1514-1 : texlive-bin security update
Nick Roessler from the University of Pennsylvania has found a buffer overflow in texlive-bin, the executables for TexLive, the popular distribution of TeX document production system. This buffer overflow can be used for arbitrary code execution by crafting a special type1 font .pfb and provide it...
Debian: Security Advisory (DLA-1514-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1514-1] texlive-bin security update
Package : texlive-bin Version : 2014.20140926.35254-6+deb8u1 CVE ID : not yet available Nick Roessler from the University of Pennsylvania has found a buffer overflow in texlive-bin, the executables for TexLive, the popular distribution of TeX document production system. This buffer overflow can b...
[SECURITY] [DSA 4299-1] texlive-bin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4299-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 21, 2018 https://www.debian.org/security/faq -...
DSA-4299-1 texlive-bin - security update
Bulletin has no description...
Debian: Security Advisory (DSA-4299-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-17208
Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface. This occurs because shell...
CVE-2018-17208
Linksys Velop firmware 1.1.2.187020 is affected by an unauthenticated command injection in cgi-bin/zbtest.cgi and cgi-bin/zbtest2.cgi. The root cause is mishandling of shell metacharacters in the query string by ShellExecute, enabling full root access and CSRF exploitation. No patch/version or mi...
CVE-2018-17208: Improper Neutralization of Special Elements used in an OS Command
Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface. This occurs because shell...
PT-2018-13949
Name of the Vulnerable Software and Affected Versions Linksys Velop version 1.1.2.187020 Description The issue allows unauthenticated command injection, providing an attacker with full root access. This can be achieved via the "cgi-bin/zbtest.cgi" or "cgi-bin/zbtest2.cgi" API endpoints. The...
PT-2018-13938
Name of the Vulnerable Software and Affected Versions Neato Botvac Connected version 2.2.0 Description An issue allows the execution of unauthenticated manual drive commands on devices with an active session. Commands such as forward, back, arc-left, arc-right, pivot-left, and pivot-right are...
CVE-2018-16591: Missing Authorization
FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/smchangepassword.cgi and /cgi-bin/smsmschangepasswd.cgi...
PT-2018-13634
Name of the Vulnerable Software and Affected Versions FURUNO FELCOM versions 250 and 500 Description The issue allows unauthenticated users to change passwords for critical accounts, including Admin, Log, and Service, as well as the protected "SMS" panel. This is achieved through access to specif...
9tox.de XSS vulnerability
Open Bug Bounty ID: OBB-674695 Description| Value ---|--- Affected Website:| 9tox.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Directory traversal
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...
PT-2018-13395
Name of the Vulnerable Software and Affected Versions Endress+Hauser WirelessHART Fieldgate SWG70 versions 3.x Description The issue allows Directory Traversal via the filename parameter in the "fcgi-bin/wgsetcgi" endpoint. Recommendations For Endress+Hauser WirelessHART Fieldgate SWG70 versions...
CVE-2018-16059: Improper Limitation of a Pathname to a Restricted Directory
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...
CVE-2018-1000669
KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...
PT-2018-9521
Name of the Vulnerable Software and Affected Versions KOHA Library System versions 16.11.x through 16.11.13 KOHA Library System versions 17.05.x through 17.05.05 Description The issue allows attackers to mark payments as paid for certain users on behalf of administrators due to a Cross Site Reque...