CVE-2018-14990

CVE-2018-14990 affects multiple Android devices (Coolpad Defiant, ZTE ZMAX Pro, T-Mobile Revvl Plus) due to a pre-installed Rich Communication Services (RCS) app. The vulnerable components include a package named com.suntek.mway.rcs.app.service (with a TestReceiver broadcast receiver) and a refac...

CVE-2018-14991: Improper Input Validation

The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of...

CVE-2018-15003: Improper Input Validation

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

PT-2019-9089

Name of the Vulnerable Software and Affected Versions Coolpad Defiant version 7.1.1 T-Mobile Revvl Plus version 7.1.1 Description The issue concerns a pre-installed platform app with a package name of com.qualcomm.qti.telephony.extcarrierpack that contains an exported broadcast receiver app...

PT-2019-9082

Name of the Vulnerable Software and Affected Versions Coolpad Defiant version 7.1.1 ZTE ZMAX Pro version 6.0.1 T-Mobile Revvl Plus version 7.1.1 Description The issue concerns a pre-installed Rich Communication Services RCS app with a package name of com.suntek.mway.rcs.app.service and...

CVE-2018-14990: Improper Input Validation

The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of...

The vulnerability of the WLS Core Components of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the WLS Core Components of the WebLogic Server application server is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the T3 protocol...

Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v

Summary AT&T has released version 1801-v for the Vyatta 5600. Details of this release can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches Vulnerability...

Design/Logic Flaw

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-9590

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-9590

CVE-2019-9590 affects the TENGCONTROL T-920 PLC, version v5.5. The issue allows a remote attacker to trigger a denial of service (persistent failure mode) by sending a specific payload: the byte sequence 0x19 0xB2 0x00 0x00 0x00 0x06 0x43 0x01 0x00 0xAC 0xFF 0x00 (UID 0x43) to TCP port 502. The a...

CVE-2019-9590

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

PT-2019-19731

Name of the Vulnerable Software and Affected Versions TENGCONTROL T-920 PLC version 5.5 Description An issue allows remote attackers to cause a denial of service, resulting in a persistent failure mode. This can be achieved by sending a series of specific requests, identified as UID 0x43, to the...

CVE-2019-9590: Undefined Security Weakness

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...

PT-2019-19017

Name of the Vulnerable Software and Affected Versions Maccms version 8.0 Description The issue allows for XSS via the t key parameter in the inc/config/cache.php file. This is because the template/paody/html/vod type.html file mishandles the keywords parameter, and the a/tpl/module/db.php file on...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9065

CVE-2019-9065 affects PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1. The connected CNVD/NVD records describe an input validation vulnerability that enables parameter tampering of the payment amount, allowing an attacker to alter the charged value. The issue stems from insufficient valida...