PT-2019-20260

Name of the Vulnerable Software and Affected Versions FortiGate versions 6.0.0 through 6.0.6 FortiGate versions 6.2.0 through 6.2.1 Description The issue is related to an Improper Neutralization of Input in the hostname parameter of a DHCP packet under the DHCP monitor page. This may allow an...

Cisco Prime Infrastructure Health Monitor tar file directory traversal

Added: 11/25/2019 CVE: CVE-2019-1821 BID: 108339 Background Cisco Prime Infrastructure is a management system of wireless and wired networks. Problem A vulnerability in Cisco Prime Infrastructure Health Monitor allows a remote attacker to execute arbitrary commands by uploading a specially crafte...

Lexmark Services Monitor File Disclosure

File disclosure vulnerability in Lexmark Services Monitor Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2019-16758

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

CVE-2019-16758

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

Directory traversal

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

CVE-2019-16758

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

CVE-2019-16758

CVE-2019-16758 affects Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070. A remote attacker can perform directory traversal using sequences like /../../../ or ..%2F..%2F..%2F to obtain local files on the host OS, constituting a directory-traversal/file-disclosure vulnerability. The is...

CVE-2019-16758: Improper Limitation of a Pathname to a Restricted Directory

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

Mozilla Bug Bounty Program Doubles Payouts, Adds Firefox Monitor

Mozilla is bumping up its bug bounty payouts and has added new websites and services – including the recently deployed Firefox Monitor– to its bug bounty program in hopes of attracting more researchers to sniff out vulnerabilities. The browser-maker is doubling bug bounty payouts for most of its...

DEBIAN-CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

UBUNTU-CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

Information disclosure

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

Lexmark Services Monitor Directory Traversal Vulnerability (CNVD-2020-03042)

Lexmark Services Monitor is a service monitor for Lexmark products from Lexmark USA. A security vulnerability exists in Lexmark Services Monitor version 2.27.4.0.39 running on TCP port 2070. A remote attacker could exploit the vulnerability with the help of '/... /... /... /' or '... %2F... %2F...

PT-2019-6748

Name of the Vulnerable Software and Affected Versions Pidgin version 2.10.0 Description The issue allows local users to obtain sensitive information via a dbus session monitor, as Pidgin 2.10.0 uses DBUS for certain cleartext communication. Recommendations For Pidgin version 2.10.0, consider...

Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by OS Command Injection vulnerability (CVE-2016-0236)

Summary IBM Security Guardium Database Activity Monitor could allow an authenticated attacker to injection commands into the search field that will be executed as root. Vulnerability Details CVEID: CVE-2016-0236 DESCRIPTION: IBM Security Guardium Database Activity Monitor could allow an...

Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Execution with Unnecessary Privileges vulnerability (CVE-2016-0328)

Summary IBM Security Guardium Database Activity Monitor could allow a local user to injection commands that would be executed with administrator privileges. Vulnerability Details CVEID: CVE-2016-0328 DESCRIPTION: IBM Security Guardium Database Activity Monitor could allow a local user to injectio...

PT-2019-14815

Name of the Vulnerable Software and Affected Versions Lexmark Services Monitor version 2.27.4.0.39 Description A remote attacker can exploit a directory traversal issue in the Lexmark Services Monitor to obtain local files on the host operating system. This can be achieved by using a directory...

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link: https://www.lexmark.com/enus.html​ Version: 2.27.4.0.39 Latest...