CVE-2019-13022

creationtimestamp| type| source ---|---|--- 2020-05-14 20:34:31+00:00| seen| https://t.me/cibsecurity/12075 2020-05-14 21:04:25+00:00| seen| https://t.me/cibsecurity/12077 2020-05-14 23:29:29+00:00| seen| https://t.me/VulnerabilityNews/14583...

Design/Logic Flaw

The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem, rather than encrypted within the MySQL database. This backup copy of the passwords is made as part of the installation script, after the administrator has generated a password...

CVE-2019-13022

Bond JetSelect (all versions) has a vulnerability in ENCtool.jar password generation where the plaintext password is XORed into an “encrypted” value stored in the database, making the initial admin passwords trivially reversible and enabling privilege escalation to modify/delete networking config...

CVE-2018-13022

The Xiaomi Mi Router 3 (firmware version 2.22.15) is affected by a cross-site scripting (XSS) vulnerability in the API 404 page. The issue enables an attacker to inject and execute arbitrary JavaScript by supplying a crafted URL path. Public references across CNVD/CVE records confirm the same des...

CVE-2017-13022

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...

CVE-2017-13022

tcpdump has a buffer over-read in print-ip.c:ip_printroute() (CVE-2017-13022). Debian's DSA-3971-1 and related advisories indicate the fix is in tcpdump 4.9.2 (and backported for various releases). Systems using tcpdump prior to 4.9.2 should upgrade to 4.9.2 or later to mitigate. The Debian advis...

CVE-2017-13022

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...

CVE-2017-13022

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...

Debian: Security Advisory (DSA-3971-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...