CVE-2020-5750

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

CVE-2020-5750

Summary: CVE-2020-5750 affects Tecnick.com TCExam 14.2.2. The issue is insufficient output sanitization in the self-registration feature, enabling a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS). What’s affected: TCExam 14.2.2 (web-based e-exam system) as descr...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1245)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security update

2.6.39-400.313.1 - ACPI: sbshc: remove raw pointer from printk message Greg Kroah-Hartman Orabug: 27987133 CVE-2018-5750 - dm: fix race between dmgetfromkobject and dmdestroy Hou Tao Orabug: 27987143 CVE-2017-18203 - tcp: enforce tcpminsndmss in tcpmtuprobing Eric Dumazet Orabug: 29886601...

AirTies Air 5750 cross-site scripting vulnerability (CNVD-2018-20474)

AirTies Air 5750 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5750. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Airties AIR5021 1.0.0.18 Cross Site Scripting

Exploit Title: Airties AIR5021 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Linux Mint / Windows 10 CVE : CVE-2018-17588 A cros...

EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1245)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4193)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4193 advisory. - RDS: null pointer dereference in rdsatomicfreeop Mohamed Ghannam Orabug: 27986376 CVE-2018-5333 - ACPI: sbshc: remove raw pointer from printk...

Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000004 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a race condition in the sound system. A remote attacker could exploit this vulnerability to caus...

Ubuntu: Security Advisory (USN-3697-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3698-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3698-1 advisory. It was discovered that the nested KVM implementation in the Linux kernel in some situations did not properly prevent second level guests from reading and...

Ubuntu: Security Advisory (USN-3698-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3697-1: Linux kernel vulnerabilities

It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2018-1130 Jann Horn discovered that the 32 bit adjtimex syscall implementation for 64 bit...