PT-2020-9548 · Ricoh · Ricoh Sp C250Dn

Name of the Vulnerable Software and Affected Versions: Ricoh SP C250DN version 1.06 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For version 1.06, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...

PT-2020-9545 · Ricoh · Ricoh Sp C250Dn

Name of the Vulnerable Software and Affected Versions: Ricoh SP C250DN version 1.06 Description: The issue is related to Incorrect Access Control. Recommendations: For Ricoh SP C250DN version 1.06, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2020-9549 · Ricoh · Ricoh Sp C250Dn

Name of the Vulnerable Software and Affected Versions: Ricoh SP C250DN version 1.06 Description: The issue is related to Incorrect Access Control. Recommendations: For version 1.06, at the moment, there is no information about a newer version that contains a fix for this issue...

ATasm Buffer Overflow Vulnerability (CNVD-2019-45902)

ATasm is a command line cross assembler for the 6502 microprocessor A buffer overflow vulnerability exists in the 'parseexpr' function of the setparse.c file in ATasm version 1.06. The vulnerability stems from a networked system or product performing operations in memory without properly validati...

CVE-2019-19785

ATasm 1.06 has a stack-based buffer overflow in the tocomma function in asm.c via a crafted .m65 file...

CVE-2019-19786

ATasm 1.06 has a stack-based buffer overflow in the parseexpr function in setparse.c via a crafted .m65 file...

CVE-2019-19787

ATasm 1.06 has a stack-based buffer overflow in the getsignedexpression function in setparse.c via a crafted .m65 file...

Stack overflow

ATasm 1.06 has a stack-based buffer overflow in the getsignedexpression function in setparse.c via a crafted .m65 file...

Stack overflow

ATasm 1.06 has a stack-based buffer overflow in the parseexpr function in setparse.c via a crafted .m65 file...

Stack overflow

ATasm 1.06 has a stack-based buffer overflow in the tocomma function in asm.c via a crafted .m65 file...

CVE-2019-19785

ATasm 1.06 is affected by CVE-2019-19785 due to a stack-based buffer overflow in the to_comma() function (asm.c) triggered by a crafted .m65 file. The issue is confirmed in Fedora advisories referencing CVE-2019-19785 and related CVEs (19786, 19787) with downstream updates in Fedora: ATasm 1.09 p...

PT-2019-15957 · Atasm · Atasm

Name of the Vulnerable Software and Affected Versions: ATasm version 1.06 Description: The issue is a stack-based buffer overflow in the parse expr function, located in setparse.c, which can be triggered by a crafted .m65 file. Recommendations: For ATasm version 1.06, as a temporary workaround,...

CVE-2019-17507

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

CVE-2018-16091

In System Management Module SMM versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows...

CVE-2018-16094

In System Management Module SMM versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow...

CVE-2018-16096

In System Management Module SMM versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting...

CVE-2018-9084

In System Management Module SMM versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented...

CVE-2018-9084 System Management Module Vulnerabilities

In System Management Module SMM versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented...

Qmail SMTP - Bash Environment Variable Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Qmail SMTP Bash Environment Variable Injection Shellshock', 'Description' = %q This module exploits a shellshock vulnerability on Qmail, a public...

CVE-2014-3895

The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02...