8941 matches found
Emerson DeltaV Smart Switch Hardcoded Credentials (ICSA-19-190-01)
Binary data 720299.prm...
Rockwell Automation RSLinx Classic <= 3.90.01 Privilege Escalation (ICSA-18-158-01)
Binary data 720297.prm...
Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2019-254-01)
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-254-01. The text itself is copyright C Slackware Linux,...
Rockwell Automation MicroLogix 1100 <= 16.0 and MicroLogix 1400 <= 21.003 Improper Authentication (ICSA-18-095-01)
Binary data 720294.prm...
Rockwell Automation PanelView Plus 6 700-1500 <= 9.0 Missing Authorization (ICSA-17-157-01)
Binary data 720293.prm...
Gesior-AAC SQL Injection Vulnerability (CNVD-2019-31346)
Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the thankyou.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. ...
Gesior-AAC SQL Injection Vulnerability
Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the shop.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...
Ping Identity Agentless Integration Kit Cross Site Scripting
Ping Identity Agentless Integration Kit Reflected Cross-site Scripting XSS Link: https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190305-01PingIdentityAgentlessIntegrationKitReflectedXSS Vulnerability Overview Ping Identity Agentless Integration Kit before 1.5 is susceptible t...
CVE-2019-15568
idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via taxlevels...
CVE-2019-15573
Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php...
CVE-2013-7474
creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:56+00:00| seen| https://t.me/cibsecurity/5870...
CVE-2015-9291
creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:50+00:00| seen| https://t.me/cibsecurity/5867 2019-08-07 18:35:07+00:00| seen| https://t.me/cibsecurity/5978...
CVE-2016-10850
creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:49+00:00| seen| https://t.me/cibsecurity/5866...
Wind River VxWorks (Update A)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Wind River Equipment: VxWorks Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer,...
PT-2019-8316 · Edx +1 · Open Edx +1
Name of the Vulnerable Software and Affected Versions: Open edX versions prior to 2017-01-10 Description: The installation process exposes a MongoDB instance to external connections with default credentials. This issue may allow unauthorized access to the database. Recommendations: For versions...
Siemens SCALANCE X-200 < v5.2.4, XP/XC/XF-200 < v4.1, X-300 all versions (ICSA-19-085-01)
Binary data 720273.prm...
CVE-2019-13374
creationtimestamp| type| source ---|---|--- 2019-07-07 01:59:53+00:00| seen| https://t.me/cveNotify/287...
CVE-2017-18346
SQL injection vulnerability in /wbg/core/includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbglogin parameter...
demo-shop.web-srv-01.quis.ag Cross Site Scripting vulnerability
Security Researcher Mughiwara Helped patch 191 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting demo-shop.web-srv-01.quis.ag website and its users...