CVE-2014-7858

The checklogin function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string...

Mirion Technologies Telemetry Enabled Devices

CVSS v3 5.0 Vendor: Mirion Technologies Equipment: Telemetry Enabled Devices Vulnerabilities: Use of Hard-Coded Cryptographic Key, Inadequate Encryption Strength AFFECTED PRODUCTS The following telemetry enabled devices are affected: DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-3...

CVE-2017-9186

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17...

archive.org XSS vulnerability

Vulnerable URL: https://archive.org/details/fav-markferree%22%3E%3Cimg%20src=null%20onerror=prompt'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities

OVERVIEW Siemens has released a new version of SIMATIC STEP 7 TIA Portal to mitigate information disclosure vulnerabilities. These vulnerabilities were reported directly to Siemens by Dmitry Sklyarov and Gleb Gritsai from Positive Technologies. Siemens has produced a new version to mitigate these...

D-Link DNR-326 Authentication Bypass Vulnerability

The D-Link DNR-326 is a NAS network storage product from AUO D-Link. An authentication bypass vulnerability exists in the D-Link DNR-326. An attacker can exploit this vulnerability to bypass the authentication mechanism and gain unauthorized access...

PT-2014-1985 · D Link · Dnr-326 +4

Name of the Vulnerable Software and Affected Versions: D-Link DNR-320L versions prior to 1.04b08 D-Link DNS-320LW versions prior to 1.04b08 D-Link DNR-322L versions prior to 2.10 build 03 D-Link DNR-326 versions prior to 2.10 build 03 D-Link DNS-327L versions prior to 1.04b01 Description: The iss...

PT-2014-1975 · D Link · Dnr-326

Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...

Slackware Advisory SSA:2012-326-03 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2012-326-03. OpenVAS Vulnerability Test $Id: esoftslkssa201232603.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-326-03 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware 13.37 / 14.0 / current : seamonkey (SSA:2012-326-01)

New seamonkey packages are available for Slackware 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2012-326-01. The text itself is copyrigh...

Webradev Download Protect 1.0 - Remote File Inclusion

Webradev Download Protect 1.0 - Remote File Inclusion Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

Ubuntu 5.04 / 5.10 / 6.06 LTS : heartbeat vulnerability (USN-326-1)

Yan Rong Ge discovered that heartbeat did not set proper permissions for an allocated shared memory segment. A local attacker could exploit this to render the heartbeat service unavailable Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly...