CVE-2020-7567

CVE-2020-7567 targets Schneider Electric Modicon M221 PLCs. A missing encryption of sensitive data vulnerability could allow an attacker who captures traffic between EcoStruxure Machine-Basic software and the M221 controller to break encryption keys and obtain password hashes. Affected: Modicon M...

CVE-2015-7567

Summary: CVE-2015-7567 is a SQL injection vulnerability in Yeager CMS 1.2.1 that allows remote attackers to execute arbitrary SQL via the "passwordreset&token" parameter. The issue stems from improper input handling in the authentication/password reset flow (root cause: unsafely constructed SQL f...

Huawei EulerOS: Security Advisory for openslp (EulerOS-SA-2019-2394)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : openslp (EulerOS-SA-2019-2641)

According to the versions of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via ...

EulerOS 2.0 SP2 : openslp (EulerOS-SA-2019-2394)

According to the versions of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via ...

EulerOS 2.0 SP5 : openslp (EulerOS-SA-2019-2176)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a...

CVE-2019-7567

An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...

CVE-2019-7567

CVE-2019-7567 affects Waimai Super Cms 20150505. The vulnerability is a reflected XSS in the admin panel: admin.php?m=Member&a=adminaddsave, triggered via the username or password parameter. The NVD notes a medium severity (CVSS v3.0 base score 6.1) with network attack vector and user interaction...

CVE-2016-7567

creationtimestamp| type| source ---|---|--- 2018-11-09 19:14:19+00:00| seen| https://t.me/VulnerabilityNews/2973...

CVE-2018-7567

In the Admin Package Manager in Open Ticket Request System OTRS 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server...

CVE-2018-7567

CVE-2018-7567 affects Open Ticket Request System (OTRS) Admin Package Manager, with RCE via loading a crafted opm file containing a CodeInstall element. Vulnerable versions: OTRS 5.0.0–5.0.24 and 6.0.0–6.0.1. The issue requires authentication of admin users and can execute commands on the server ...

CVE-2018-7567

In the Admin Package Manager in Open Ticket Request System OTRS 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server...

SUSE SLED12 / SLES12 Security Update : openslp (SUSE-SU-2018:0100-1)

This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...

Fedora 26 : openslp (2017-ffc47d48ec)

Fix possible overflow in SLPFoldWhiteSpace, CVE-2016-7567 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 25 : openslp (2017-47a4910f07)

Fix possible overflow in SLPFoldWhiteSpace, CVE-2016-7567 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for openslp FEDORA-2017-47a4910f07

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-36967 CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26

Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...

CVE-2016-7567

Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...

CVE-2016-7567

CVE-2016-7567 affects OpenSLP 2.0 and is caused by a buffer overflow in the SLPFoldWhiteSpace function (common/slp_compare.c). This vulnerability allows remote attackers to impact the target via a crafted SLP message; CVSS vectors in the report indicate high impact with network access and no auth...

openSUSE Security Update : openslp (openSUSE-2016-1262)

This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...