1020 matches found
CVE-2019-5927
Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...
JVN#60497148: "an" App for iOS vulnerable to directory traversal
"an" App for iOS provided by PERSOL CAREER CO., LTD. uses the old version of cordova-plugin-ionic-webview, and inherits a directory traversal vulnerability CWE-22, CVE-2018-16202. Impact A remote attacker may obtain an arbitrary file such as a file related to an application on iOS device. As a...
Fedora 29 : radare2 (2019-5750ad7485)
Security fix for CVE-2018-20455 CVE-2018-20456 CVE-2018-20457 CVE-2018-20458 CVE-2018-20459 CVE-2018-20460 CVE-2018-20461 through rebase to 3.2.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted ...
CVE-2018-1000880
libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards release v3.2.0 onwards contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archivereadsupportformatwarc.c, warcread that can result in DoS - quasi-infinite run time and disk usage from ti...
EVLink Parking Code Injection Vulnerability
Schneider Electric EVLink Parking is a commercial electric vehicle charging solution from Schneider Electric, France. A code injection vulnerability exists in Schneider Electric EVLink Parking 3.2.0-12v1 and prior versions. A remote attacker could exploit this vulnerability to execute code and ga...
EVLink Parking Privilege Vulnerability
Schneider Electric EVLink Parking is a commercial electric vehicle charging solution from Schneider Electric, France. A security vulnerability exists in Schneider Electric EVLink Parking 3.2.0-12v1 and prior versions, which stems from the program's use of hard-coded credentials. An attacker could...
CVE-2018-7800
A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12v1 and earlier, which could enable an attacker to gain access to the device...
CVE-2018-7802
A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12v1 and earlier, which could give access to the web interface with full privileges...
PT-2018-2181 · Schneider Electric · Evlink Parking
Name of the Vulnerable Software and Affected Versions: EVLink Parking versions 3.2.0-12 v1 and earlier Description: The issue is related to a code injection possibility, which could allow a remote attacker to gain access with maximum privileges. Recommendations: For EVLink Parking versions 3.2.0-...
CVE-2018-19083
WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialcharsdecode function via the /?/publish/ajax/publishquestion/ questioncontent parameter...
CVE-2018-19083
WeCenter versions 3.2.0–3.2.2 contain a cross‑site scripting (XSS) vulnerability in the template views/default/question/index.tpl.html where htmlspecialchars_decode is applied to the question_content parameter passed via /?/publish/ajax/publish_question/. The CVE entry specifies the affected comp...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for Digital Payments
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Digital Payments. Financial Transaction Manager for Digital Payments FTM DP has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3732 DESCRIPTION:...
CVE-2018-16278
phpkaiyuancms PhpOpenSourceCMS POSCMS V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajaxsavedraft function with the dir parameter...
Samba 'libsmbclient' Heap Buffer Overflow Vulnerability (Aug 2018)
Samba is prone to a heap based buffer overflow vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Arbitrary File Upload Vulnerability in POSCMS v3.2.0 (Free Edition)
POSCMS PhpOpenSourceCMS is a PHP and MySQL based, open source, cross-platform web content management system CMS. POSCMS 3.2.0 free version suffers from an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to write files and execute arbitrary code to gain server...
SQL Injection Vulnerability in POSCMS v3.2.0 (Free Edition) R***.php Page
POSCMS PhpOpenSourceCMS is a set of China Tianrui information technology company developed a set of PHP and MySQL-based, open source, cross-platform Web content management system CMS. A SQL injection vulnerability exists in the R.php page of POSCMS v3.2.0 free version, which is caused by the...
Schneider Electric Evlink Charging Station Elevation of Privilege Vulnerability
The Schneider Electric Evlink Charging Station is a commercial electric vehicle charging solution from the French company Schneider Electric. A security vulnerability exists in the web interface of Schneider Electric Evlink Charging Station prior to version 3.2.0-12v1, which is caused by the...
CVE-2018-7778
In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users...
CVE-2018-11053
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system /etc/hosts to world writable. A malicious low privileged operating system user or process...
