Intel® XMM™ 7360 Cell Modem Advisory

Summary: A potential security vulnerability in the Intel® XMM™ 7360 Cell Modem may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24482 Description: Improper buffer restrictions in firmware for IntelR...

HPSBHF03714 rev. 1 - Intel® XMM™ 7360 Cell Modem February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® XMM™ 7360 Cell Modem that might allow denial of service. Intel is releasing...

CVE-2020-7360

CVE-2020-7360 is a local privilege-escalation via an Uncontrolled Search Path Element (CWE-427) in SmartControl. Affected: SmartControl 4.3.15 and earlier releases up to 2020-04-15. Attack involves placing a specially crafted DLL in the software search path to escalate privileges for an authentic...

CVE-2020-7360 Philips SmartControl DLL Hijacking

An Uncontrolled Search Path Element CWE-427 vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticated user to escalate privileges by placing a specially crafted DLL file in the search path. This issue was fixed in version 1.0.7, which was...

CVE-2019-7360

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...

CVE-2018-7360

The CVE-2018-7360 entry concerns the ZTE ZXHN F670 modem (V1.1.10P3T18 and earlier). Affected component: appviahttp service leading to an information exposure vulnerability that could allow an unauthenticated attacker to obtain the GPON SN. The connected CNVD/EUVD entries corroborate that the iss...

CVE-2016-7360

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7360

...

CVE-2016-7360

CVE-2016-7360 is rejected/not used; the candidate was not associated with any vulnerability in 2016 per initial description.

CVE-2017-7360

CVE-2017-7360 affects Pixie 1.0.4. The connected documents identify a cross-site scripting vulnerability in the admin interface, specifically in the admin/index.php s=settings&x= parameter, indicating insufficient input validation in the settings handling path. The impact is an XSS where an attac...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2015-7360

FortiSandbox WebUI prior to version 2.1 is vulnerable to multiple cross-site scripting (XSS) flaws. The Flaws allow remote attackers to inject arbitrary script or HTML via: (1) the serial parameter in alerts/summary/profile/; (2) the urlForCreatingReport parameter in csearch/report/export/; (3) t...

CVE-2014-7360

CVE-2014-7360 affects the Android app How To Boil Eggs (com.appmakr.app842173), version 251333. The root cause is lack of SSL X.509 certificate verification, allowing MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Reported impact aligns with partial con...

Fritz!Box Webcm Unauthenticated Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

CVE-2013-7360

Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown vectors...

CVE-2013-7360

CVE-2013-7360 affects SAP adminadapter and enables remote attackers to read or write arbitrary files through unknown vectors. The entry lists a high-severity CVSS v2 base score (7.5) with network access, low attack complexity, and no authentication. Connected records reiterate the same vulnerabil...