30833 matches found
Weak password vulnerability in Hikvision cameras
Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. A weak password vulnerability exists in Hikvision cameras from 2013 and earlier versions, which can be exploited by an attacker to remotely connect to and control the camera...
Description of the security update for SharePoint Foundation 2013: March 12, 2019
Description of the security update for SharePoint Foundation 2013: March 12, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn mo...
Microsoft Teams help & learning
None None...
Simple Machines Forum (SMF) <= 2.0.4 Multiple Vulnerabilities
Simple Machines Forum SMF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
njiandan-cms cross-site request forgery vulnerability
njiandan-cms is a PHP-based content management system CMS. A cross-site request forgery vulnerability exists in njiandan-cms version 2013-05-23 and earlier. A remote attacker can exploit this vulnerability to add an administrator account with the help of the index.php/admin/usernew URL...
CVE-2013-7466
creationtimestamp| type| source ---|---|--- 2019-03-08 02:36:14+00:00| seen| https://t.me/cibsecurity/2982...
CVE-2013-7467
creationtimestamp| type| source ---|---|--- 2019-03-08 02:36:13+00:00| seen| https://t.me/cibsecurity/2981...
CVE-2013-7468
creationtimestamp| type| source ---|---|--- 2019-03-08 02:36:12+00:00| seen| https://t.me/cibsecurity/2980...
CVE-2013-7468
Simple Machines Forum SMF 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter...
CVE-2013-7466
CVE-2013-7466 affects Simple Machines Forum (SMF) 2.0.4. The issue is a local file inclusion vulnerability in install.php that can execute remote code via an ../ directory traversal in the db_type parameter if install.php remains after installation. This is documented to enable remote code execut...
CVE-2013-7467
CVE-2013-7467 : Concrete details across multiple sources show that Simple Machines Forum (SMF) 2.0.4 is vulnerable to a cross-site scripting (XSS) issue. The vulnerability is triggered by the parameter in index.php with action=pm;sa=settings;save sa, allowing injection of script that can affect u...
CVE-2013-7468
Affected software: Simple Machines Forum (SMF) 2.0.4. Vulnerability: PHP Code Injection via the dictionary parameter in the index.php?action=admin;area=languages;sa=editlang path. Root cause (as described): unsafely processed user-supplied dictionary parameter enables code execution. Impact (as s...
OracleVM 3.3 / 3.4 : polkit (OVMSA-2019-0008)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz1667310 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0008...
Slackware 14.0 / 14.1 / 14.2 / current : python (SSA:2019-062-01)
New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-062-01. The text itself is copyright C Slackware Linu...
CVE-2013-7469
Seafile through 6.2.11 always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...
CVE-2013-7469
Seafile through 6.2.11 always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...
CVE-2013-7469
CVE-2013-7469 affects Seafile up to version 6.2.11, where the same Initialization Vector is reused in CBC mode to encrypt private data. This IV reuse enables chosen-plaintext or dictionary attacks against confidentiality. The primary sources note the vulnerability but do not provide a published p...
CVE-2013-2516
creationtimestamp| type| source ---|---|--- 2019-02-16 00:24:17+00:00| seen| https://t.me/cibsecurity/2596...