640 matches found
CVE-2015-3976
Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...
QNAP TS212P Elevation of Privilege Vulnerability
QNAP TS212P devices are NAS storage devices from QNAP Systems, and the Surveillance Station component is one of the image management components. A security vulnerability exists in the Surveillance Station component of QNAP TS212P devices using firmware version 4.2.1 build 20160601. An attacker ca...
Session fixation
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station...
CVE-2017-12582
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station...
CVE-2017-12582
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station...
CVE-2017-12582
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station...
CVE-2017-12582
The CVE concerns QNAP TS212P devices, specifically the Surveillance Station component on firmware 4.2.1 build 20160601. An unprivileged user can access all functions within Surveillance Station without a frontend login, using that user’s SID. This implies a privilege/access control flaw that expo...
Oracle Hospitality e7 Unauthorized Access Vulnerability
Oracle Hospitality Applications is a set of business applications, servers and storage solutions for hotel management from Oracle. The program provides human resources cost management, provide customers with the entire journey of service tracking management to improve customer satisfaction and...
CVE-2017-10208
Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successfu...
CVE-2017-10201
Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to...
CVE-2015-9056
Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack...
Information disclosure
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information...
Wireshark 2.2.0 2.2.12 - ROS Dissector Denial of Service
Wireshark 2.2.0 2.2.12 - ROS Dissector Denial of Service Source: https://bugs.wireshark.org/bugzilla/showbug.cgi?id=13637 Build Information: TShark Wireshark 2.3.0 v2.3.0rc0-3235-gd97ce76161 Copyright 1998-2017 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free...
Denial of service
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service...
CVE-2016-1194
CVE-2016-1194 affects Cybozu Garoon (3.1–4.2), with the issue causing a remote-denial-of-service condition. Public documents consistently cite DoS by remote attackers and resource consumption, impacting Garoon prior to version 4.2.1. The vulnerability is evidenced across multiple sources (NVD, JV...
Canonical Url,4.1.1,SQL Injection
Canonical Url by CMSPlugin.com, 4.1.1, SQL Injection Resolution: update to 4.2.1 Update notice: https://www.cmsplugin.com/products/components/4-canonical-url...
Joomloc-CAT, version 4.1.3, SQL injection
Joomloc-CAT, version 4.1.3, SQL injection Resolution: update to 4.2.1 Update Notice URL http://www.joomloc.fr.nf/en/downloads-products/file/joomloc-pro-channel-manager-pms.html...
Integer overflow
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...