105 matches found
Command injection
includes/configureclient.php in RaspAP 2.6.6 allows attackers to execute commands via command injection...
CVE-2021-38556
includes/configureclient.php in RaspAP 2.6.6 allows attackers to execute commands via command injection...
PT-2021-22208 · Raspap · Raspap
Name of the Vulnerable Software and Affected Versions: RaspAP version 2.6.6 Description: The issue allows attackers to execute commands via command injection in the includes/configure client.php file. This can lead to unauthorized access and control of the system. Recommendations: For RaspAP...
Authentication flaw
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any...
Lenovo XClarity Administrator Cross-Site Scripting Vulnerability (CNVD-2020-09985)
Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product is capable of providing agentless hardware management for servers, storage, network switches, and more. A cross-site scripting vulnerability exists in Lenovo XClarity Administrator LXC...
CVE-2019-6194
An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.6.6 that could allow information disclosure...
Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US
No description provided...
Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29477 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6193, CVE-2019-6194, CVE-2019-19757 Summary Description: CVE-2019-6193: An information disclosure vulnerability was reported in...
CVE-2019-18949
SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration...
CVE-2019-18949
SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration...
WordPress affiliates-manager plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. affiliates-manager is an e-commerce marketing plugin used in it. A cross-site request forgery vulnerability exists in versions of the...
CVE-2019-15868
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF...
CVE-2019-9208
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences...
Wireshark Security Updates (wnpa-sec-2019-06, wnpa-sec-2019-07, wnpa-sec-2019-08) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
[SECURITY] Fedora 29 Update: wireshark-2.6.6-1.fc29
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
Wireshark 2.6.x < 2.6.6 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 2.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.6 advisory. - In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in...
Wireshark Security Updates (wnpa-sec-2019-02, wnpa-sec-2019-03, wnpa-sec-2019-04) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
CVE-2019-5718
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a gett61string length check...
Wireshark 'non-NULL DACL' Access Control Vulnerability - Windows
Wireshark is prone to access control vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...