CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

PT-2018-12622 · Red Hat · Katello

Name of the Vulnerable Software and Affected Versions: katello versions 3.10 and older Description: A SQL injection flaw was found in katello's errata-related API, allowing an authenticated remote attacker to craft input data and force a malformed SQL query to the backend database. This can resul...

RHEL 7 : OpenShift Container Platform 3.10 (RHSA-2018:3549)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3549 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

Fr. Sauter AG CASE Suite XML External Entity Injection Vulnerability

Fr. Sauter AG CASE Suite is a software development kit for building automation systems from Fr. Sauter AG, Switzerland. An XML external entity injection vulnerability exists in Fr. Sauter AG CASE Suite version 3.10 and earlier. A remote attacker could exploit this vulnerability to cause a file...

CVE-2018-17912

An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure...

CVE-2018-17912

CVE-2018-17912 describes an XML External Entity (XXE) vulnerability in Fr. Sauter AG CASE Suite versions 3.10 and earlier, triggered when processing parameter entities. The issue could allow remote file disclosure. Public details across connected records confirm the affected product (CASE Suite),...

Linux Kernel 2.6.x / 3.10.x / 4.14.x (x64) - Mutagen Astronomy Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits / EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during exploitation. EDB Note: poc-exploit.c / / poc-exploit.c for CVE-2018-14634 Copyright C 2018 Qualys, Inc. This program is fre...

Linux kernel buffer overflow vulnerability (CNVD-2018-20065)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability in the 'chapservercomputemd5' function of the ISCSI target code in Linux kernel versions 4.18.x, 4.14.x, and 3.10.x can be exploited by...

Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation

/ EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during exploitation. EDB Note: poc-exploit.c / / poc-exploit.c for CVE-2018-14634 Copyright C 2018 Qualys, Inc. This program is free software: you can redistribute it and/or modify it...

LG SuperSign EZ CMS 2.5 Remote Code Execution

Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.10 CVE : CVE-2018-17173 1. Description LG...

CVE-2018-1070

OpenShift OpenShift Routing before v3.10 is vulnerable to improper input validation of Routing configurations, enabling DoS that can take down an entire router shard. Affected: OpenShift Container Platform routing component (pre-3.10). Root cause: input validation flaw in Routing configuration. I...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1055)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a...

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

UBUNTU-CVE-2018-1000004

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition...

DEBIAN-CVE-2017-15096

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in sendbrickreq function in glusterfsd/src/gfattach.c may be used to cause denial of service...

CVE-2017-15096

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in sendbrickreq function in glusterfsd/src/gfattach.c may be used to cause denial of service...

PT-2017-13868 · Red Hat · Glusterfs

Name of the Vulnerable Software and Affected Versions: GlusterFS versions prior to 3.10 Description: A flaw was found in GlusterFS that may cause denial of service due to a null pointer dereference in the send brick req function in glusterfsd/src/gf attach.c. Recommendations: For versions prior t...

CVE-2014-3451

OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks...

Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS Man-in-the-Middle Attack Vulnerability

A security vulnerability in the Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS-based platforms versions 3.10.0 to 3.10.4 UAE and versions 2.0.1 to 2.1.0 KSA stems from the program's failure to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be...

Information disclosure

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...