PT-2018-3751

Name of the Vulnerable Software and Affected Versions NoneCms version 1.3 Description An issue in thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter. This is demonstrated by the query string...

TP-Link TL-R600VPN HTTP Server Buffer Overflow Vulnerability (CNVD-2018-23626)

The TP-Link TL-R600VPN is an enterprise router from China P&L TP-LINK. the HTTP Server is one of the HTTP servers. A buffer overflow vulnerability exists in the HTTP Server in TP-Link TL-R600VPN HWv3 FRNv1.3.0 version and HWv2 FRNv1.2.3 version. An attacker can exploit the vulnerability to execut...

Unspecified vulnerability in libIEC61850 (CNVD-2019-43857)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetreceivePacket' function of the ethernetbsd.c file in libIEC61850 version 1.3. No details of the vulnerability are provided at this time...

libIEC61850 Denial of Service Vulnerability

libIEC61850 is an open source library for IEC 61850. A denial of service vulnerability exists in the 'EthernetsendPacket' function of the ethernetbsd.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service null pointer backreference...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in EthernetsendPacket in ethernetbsd.c. Remediation There is no fixed version for libiec61850. References - Github.com - GitHub Issu...

PT-2018-14805 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3 Description: A issue has been found in the software, which is a SEGV in ControlObjectClient setCommandTerminationHandler in client/client control.c. This issue is disputed by the software maintainer as it requires...

libIEC61850 Null Pointer Dereference Vulnerability

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. A null pointer dereference vulnerability exists in ClientDataSetgetValues in client/iedconnection.c in libIEC61850 1.3, which can be exploited by an attacker to cause a denial of service null pointer...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c. Remediation There is no fixed version for libiec61850. References - Github.com ...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox, MozillaFirefox-branding-SLE, llvm4, mozilla-nspr, mozilla-nss, apache2-mod_nss (SUSE-SU-2018:3591-1)

This update for MozillaFirefox to ESR 60.2.2 fixes several issues. These general changes are part of the version 60 release. New browser engine with speed improvements Redesigned graphical user interface elements Unified address and search bar for new installations New tab page listing top visite...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. Remediation There is no fixed version for libiec61850. References - Github.com...

Chrome, Firefox, Edge and Safari Plans to Disable TLS 1.0 and 1.1 in 2020

All major web browsers, including Google Chrome, Apple Safari, Microsoft Edge, Internet Explorer, and Mozilla Firefox, altogether today announced to soon remove support for TLS 1.0 20-year-old and TLS 1.1 12-year-old communication encryption protocols. Developed initially as Secure Sockets Layer...

Code injection

An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41447)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in the National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program's reliance on...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41446)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform. An attacker can exploit the vulnerability to...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41445)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program not properly...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

valeuraddons German Spelling Dictionary Cross-Site Scripting Vulnerability

valeuraddons German Spelling Dictionary is a German spelling dictionary application. The program is mainly used to check German spelling mistakes. A cross-site scripting vulnerability exists in valeuraddons German Spelling Dictionary version 1.3. A remote attacker can exploit this vulnerability t...