CVE-2019-7192

creationtimestamp| type| source ---|---|--- 2020-05-20 14:15:03+00:00| exploited| https://t.me/SecLabNews/7629 2020-05-23 19:40:04+00:00| published-proof-of-concept| https://t.me/cKure/629 2020-05-25 13:10:20+00:00| published-proof-of-concept| Telegram/cTUTNxLsVbqKX6WOWINdC5vNap5JntgN7QaLpOvlkc1T...

CVE-2019-7192

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...

CVE-2019-7192

CVE-2019-7192 affects QNAP Photo Station on QTS. The vulnerability is an improper access control that enables remote attackers to gain unauthorized system access (pre-auth RCE). Public write‑ups and advisories discuss unvalidated access to Photo Station components, with several CVEs in the same f...

CVE-2019-7192

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Security Bulletin: Multiple vulnerabilities in modules from the IBM SDK for Node.js affect the Cordova tools packaged in Rational Developer for i Modernization Tools Java Edition and Rational Developer for AIX and Linux (CVE-2014-7191 and CVE-2014-7192)

Summary Security vulnerabilities have been discovered in the syntax-error and qs modules packaged in the IBM SDK for Node.js and Cordova platform packaged in Rational Developer for i Modernization Tools Java Edition and Rational Developer for AIX and Linux. The fix upgrades IBM SDK for Node.js to...

CVE-2018-7192

Cross-site scripting XSS vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter...

CVE-2018-7192

osTicket

@chargetrip/internal-vue-components (>=0.0.1 <=0.0.13), ampersand-view-conventions (>=1.0.0 <=1.1.3) +260 more potentially affected by CVE-2014-7192 via syntax-error (>=0.0.0 <=0.0.1)

syntax-error NPM version =0.0.0, =0.0.1, =1.0.0, =0.0.0, =0.0.1, =1.1.5, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.2.0, =0.2.4 and more Source cves: CVE-2014-7192 Source advisory: OSV:GHSA-5726-G6R9-5F22...

CVE-2016-7192

...

CVE-2016-7192

CVE-2016-7192 is rejected; this CVE entry is not used.

Starscream 2.0.3 SSL Pinning Bypass Vulnerability

WebSocket.swift in Starscream versions 2.0.3 and below allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false. An attacker can achieve traffic interception from a man-in-the-middle position, first by resetting th...

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

CVE-2017-7192

The CVE-2017-7192 entry concerns the Starscream WebSocket library (WebSocket.swift) up to version 2.0.3, where SSL pinning can be bypassed due to incorrect handling of certValidated (it can be set to true but not to false). This enables a man-in-the-middle attack during re-connection after a TCP ...

Rockwell Automation/Allen-Bradley CompactLogix 1769 5370 Series Detection

Binary data 7192.pasl...

openSUSE Security Update : MozillaFirefox / mozilla-nspr / mozilla-nss / etc (openSUSE-2015-718)

Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. SeaMonkey was updated to 2.39. New features in Mozilla Firefox : - Private Browsing with Tracking Protection blocks certain Web elements that could be used to record yo...

CVE-2015-7192

CVE-2015-7192 affects Mozilla Firefox on macOS (OS X) prior to 42.0, where the accessibility-tools feature improperly interacts with the TABLE element. An NSAccessibilityIndexAttribute value referencing a row index can cause the application to crash (DoS) and may enable arbitrary code execution. ...

CVE-2014-7192

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file...

CVE-2014-7192

CVE-2014-7192 affects the syntax-error npm module (before 1.1.1) used with Node.js 0.10.x, including in IBM Rational Application Developer and related IBM/RSA products. The vulnerability stems from improper input handling in the syntax-error/index.js file, enabling remote attackers to execute arb...

CVE-2014-7192

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file...