1718 matches found
Elastic Cloud Enterprise 1.0.2 security update
Elastic Cloud Enterprise unsecured communication ESA-2017-13 The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle MITM the traffic between the client-forwarder and ZooKeeper they could...
Calendar Planner 1.0.1 - SQL Injection
Calendar Planner 1.0.1 - SQL Injection resolution: update to 1.0.2 update notice: http://www.joomlathat.com/news/news/calendar-planner/calendar-planner-1-0-2-security-release...
CVE-2017-2283
WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device...
I-O DATA DEVICE WN-G300R3 Hardcoded Credential Vulnerability
The I-O DATA DEVICE WN-G300R3 is a wireless router device from I-O DATA DEVICE Japan. A hard-coded credentials vulnerability exists in the I-O DATA DEVICE WN-G300R3 using firmware version 1.0.2 and earlier, which stems from the program's use of hard-coded credentials. An attacker could exploit th...
Douroshisetu Kihon Data Sakusei System Untrusted Search Path Vulnerability
Douroshisetu Kihon Data Sakusei System is a basic data creation system for road facilities released by the National Institute for Land and Infrastructure Management in Japan. An untrustworthy search path vulnerability exists in Douroshisetu Kihon Data Sakusei System 1.0.2 and earlier versions. An...
Command Injection
Overview Affected versions of fs-git do not sanitize strings passed into the buildCommand method, resulting in arbitrary code execution. Recommendation Update to version 1.0.2 or later. References - Commit eb5f70e - GitHub Advisory...
Libmenu-cache Denial of Service Vulnerability
Libmenu-cache is a library that can create and utilize caches to shorten the loading time of menu items. A denial of service vulnerability exists in Libmenu-cache version 1.0.2. A local attacker can exploit this vulnerability to cause a denial of service menu is unusable...
Design/Logic Flaw
Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service menu unavailability...
MetalGenix GeniXCMS 'forgotpassword.php' File Denial of Service Vulnerability
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A security vulnerability exists in the forgotpassword.php file in MetalGenix GeniXCMS version 1.0.2. A...
MetalGenix GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2017-07612)
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2. A remote attacker can...
MetalGenix GeniXCMS Cross-Site Scripting Vulnerability
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2, which can be exploited b...
CVE-2017-3731
If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...
CVE-2017-3732
There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed...
CVE-2017-8780
GeniXCMS 1.0.2 is affected by a cross-site scripting (XSS) vulnerability triggered by a comment mishandled during an administrator publish operation, demonstrated by a malformed P element. Root cause and impact are described across multiple sources (NVD/NVD, Red Hat, GHSA, OSV, CNVD, CNVD). The d...
CVE-2017-8762
CVE-2017-8762 affects GeniXCMS 1.0.2. The vulnerability is an XSS condition triggered when an authenticated user submits a page, demonstrated by a crafted oncut attribute in a B element. The Connected documents corroborate this across multiple sources (Red Hat, GHSA, OSV, CVE lists) with the same...
MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-06841)
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Control/Backend/menus.control.php file in MetalGenix...
MetalGenix GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2017-06842)
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2. A remote attacker can...
CVE-2017-8388
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...