PT-2014-1899

Name of the Vulnerable Software and Affected Versions Catfish versions 0.6.0 through 1.0.0 Catfish versions prior to 1.0.2 Description The issue concerns multiple vulnerabilities in the Catfish package, which can be exploited locally to compromise the confidentiality, integrity, and availability ...

CVE-2014-2096: Undefined Security Weakness

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...

PT-2014-1900

Name of the Vulnerable Software and Affected Versions Catfish versions 0.6.0 through 1.0.0 Catfish versions prior to 1.0.2 Description The issue concerns multiple vulnerabilities in the Catfish package, which can be exploited locally to compromise the confidentiality, integrity, and availability ...

Design/Logic Flaw

cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to 1 cause a denial of service reboot via a defaultreboot action or 2 reset all configuration values via a factorydefault action...

CVE-2013-7179: Improper Input Validation

The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the pingipaddr parameter...

CVE-2013-6032: Improper Input Validation

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

PT-2014-3017

Name of the Vulnerable Software and Affected Versions Lexmark X94x versions before LC.BR.P142 Lexmark X85x versions through LC4.BE.P487 Lexmark X644 and X646 versions before LC2.MC.P374 Lexmark X642 versions through LC2.MB.P318 Lexmark W840 versions through LS.HA.P252 Lexmark T64x versions before...

CVE-2013-7183: Improper Authentication

cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to 1 cause a denial of service reboot via a defaultreboot action or 2 reset all configuration values via a factorydefault action...

PT-2014-3280

Name of the Vulnerable Software and Affected Versions Seowon Intech SWC-9100 routers affected versions not specified Description The issue concerns the ping functionality in the cgi-bin/diagnostic.cgi file, which allows remote attackers to execute arbitrary commands. This is achieved by injecting...

PT-2014-3282

Name of the Vulnerable Software and Affected Versions Seowon Intech SWC-9100 routers affected versions not specified Description The issue allows remote attackers to cause a denial of service by rebooting the device or reset all configuration values to their factory defaults. This can be achieved...

Design/Logic Flaw

cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive information user names and password hashes via the cmdWebGetConfiguration action in a TSAREQUEST...

CVE-2013-7247: Undefined Security Weakness

cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive information user names and password hashes via the cmdWebGetConfiguration action in a TSAREQUEST...

PT-2014-3302

Name of the Vulnerable Software and Affected Versions Franklin Fueling Systems TS-550 evo versions prior to 2.4.0 Description The issue allows remote attackers to discover sensitive information, including user names and password hashes, via the "cmdWebGetConfiguration" action in a "TSA REQUEST" t...

PT-2014-1872

Name of the Vulnerable Software and Affected Versions memcached versions 1.4.4 through 1.4.17 Description The issue allows remote attackers to cause a denial of service, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be trigger...

Path traversal

Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter...

PT-2014-3276

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.1.0 Description The issue allows remote attackers to read arbitrary files via a full pathname in the f parameter in the /cgi-bin/jc.cgi API endpoint. Recommendations For versions prior to 4.1.0, update to version...

CVE-2013-7174: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter...

SiteServer 3.6.4 background_contentsGroup.aspx SQL注入漏洞

SiteServer 3.6.4 /siteserver/cms/backgroundcontentsGroup.aspx文件使用了位于/Bin/SiteServer.CMS.dll代码，在接收GroupName参数没有合适过滤，导致SQL注入漏洞。 0 SiteServer 3.6.4 升级到官方最新版： http://www.siteserver.cn...

PT-2013-6268

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 7.6 Description The issue concerns SQL injection vulnerabilities in the /admin/cgi-bin/rpc/doReport/18 endpoint. Remote authenticated users can execute arbitrary SQL commands by manipulating specific JSON keys,...

PT-2013-1209

Name of the Vulnerable Software and Affected Versions Memcached versions 1.4.5 and earlier Memcached versions prior to 1.4.17 Description The issue involves multiple integer signedness errors in certain functions, including process bin sasl auth, process bin complete sasl auth, process bin update...