TOTOLINK EX300 命令注入漏洞

The TOTOLINK EX300 is a 300 Mbps wireless N-range extender from China's TOTOLINK. A security vulnerability exists in TOTOLINK EX300V2 version V4.0.3c.7484, which originates from a command injection vulnerability found via the langType parameter in the setLanguageCfg function...

SUSE: Security Advisory (SUSE-SU-2017:1783-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:1690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:1441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:0990-1 Security update for zabbix

This update for zabbix fixes the following issues: - CVE-2021-27927: Fixed an improper CSRF protection mechanism bsc1183014. - CVE-2013-7484: Fixed an issue where passwords in the users table were unsalted bsc1158321...

CVE-2020-7484

CVE-2020-7484 concerns Schneider Electric TriStation 1131 (and related Triconex components) where the legacy password feature could cause uncontrolled resource consumption, yielding a denial-of-service condition when users do not follow documented connection and key-switch protections. The vulner...

CVE-2017-18690

CVE-2017-18690 involves a buffer overflow in the sensor hub of certain Samsung mobile devices. Affected platforms include KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) with Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets. The available public description notes a sensor-hub buffer overflo...

Huawei EulerOS: Security Advisory for posrgresql (EulerOS-SA-2017-1216)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7484

CVE-2019-7484 is an authenticated SQL injection in SonicWall SMA100 via the viewcacert CGI script. Affected product: SonicWall SMA100 hardware/software with SMA100 firmware versions up to 9.0.0.3 (and earlier). Root cause: insufficient input validation on SQL statements used by the viewcacert CGI...

CVE-2019-7484

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

SonicWall SMA100 Authenticated SQL injection

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7484 Last updated: March 6, 2020, 4:42 a.m...

CVE-2013-7484

creationtimestamp| type| source ---|---|--- 2019-12-03 16:03:03+00:00| seen| https://t.me/cibsecurity/8451 2024-03-05 08:41:46+00:00| seen| https://t.me/ctinow/200008...

UBUNTU-CVE-2013-7484

Zabbix before 5.0 represents passwords in the users table with unsalted MD5...

CVE-2013-7484

CVE-2013-7484 affects Zabbix prior to 5.0, where passwords are stored in the users table using an unsalted MD5 hash. The available connected documents confirm this insecure hashing and document vendor advisories noting remediation in later releases (e.g., Debian/SUSE updates). Exploitation detail...

CVE-2018-7484

Summary: CVE-2018-7484 affects PureVPN on Windows up to 5.19.4.0. The installer grants Everyone Full Control to the installation directory, and PureVPNService.exe (running as NT Authority\SYSTEM) loads DLLs via relative paths. If the program starts from a directory that is writable by all users a...

CVE-2015-7484

IBM Rational Engineering Lifecycle Manager is affected by CVE-2015-7484. The issue allows an authenticated user with project access to obtain sensitive information by sending a crafted URL to the Lifecycle Query Engine. Root cause is an information-disclosure path via LQE; impact is partial confi...

CentOS 7 : postgresql (CESA-2017:1983)

An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

postgresql security update

CentOS Errata and Security Advisory CESA-2017:1983 An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Scientific Linux Security Update : postgresql on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: postgresql 9.2.21. Security Fixes : - It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibly leaking information. A non-administrative...

Moderate: Red Hat Security Advisory: rh-postgresql95-postgresql security update

An update for rh-postgresql95-postgresql is now available for Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...