MSC-2024-17312

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

RICOH Aficio MP 301 Cross-site Scripting (CVE-2018-17312)

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

Huawei Data Communication: Multiple Vulnerabilities in IPsec IKE implementations of Huawei Firewall Products (huawei-sa-20180411-01-Bleichenbacher)

There is a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2019-17312

SugarCRM before 8.0.4 and 9.x before 9.0.2 expose a directory traversal flaw in the file function that can be triggered by a regular user. The public sources listed (including SugarCRM advisory) confirm the affected versions and the nature of the vulnerability. Remediation per the documents is up...

CVE-2018-17312

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2018-17312

CVE-2018-17312 affects the Ricoh Aficio MP 301 printer. The vulnerability is HTML Injection and Stored XSS in the address-adding function, triggered via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. Public references corroborate Cross-Site Scripting in that area, with ...

CVE-2017-17312

CVE-2017-17312 affects Huawei Firewall products (USG2205BSR, USG2220BSR, USG5120BSR, USG5150BSR) where the IPsec IKEv1 implementations mishandle malformed messages, allowing a network-attacker to trigger a denial of service. Impact is availability loss on affected devices. Related OpenVAS/CNVD/NV...

Security Advisory - Multiple Vulnerabilities in IPsec IKE of Huawei Firewall Products

There is a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability c...