CVE-2019-7851

CVE-2019-7851 is a cross-site request forgery vulnerability in Magento 2.1 before 2.1.18, 2.2 before 2.2.9, and 2.3 before 2.3.2 that can lead to unintended data deletion from customer pages. Root cause: CSRF in the affected Magento components. Remediation: apply the security updates—2.1.18, 2.2....

CVE-2018-7851

creationtimestamp| type| source ---|---|--- 2019-05-22 20:48:18+00:00| seen| https://t.me/cvemitreorg/156...

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

DLink DCS-936L Network Camera Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

CVE-2017-7851

The CVE-2017-7851 vulnerability affects D-Link DCS-936L network cameras with firmware before 1.05.07. The issue is an inadequate CSRF protection mechanism that requires the device IP address to be a substring of the HTTP Referer header, enabling cross-site request forgery. Impact details in conne...

CVE-2014-7851

Vulnerability CVE-2014-7851 affects oVirt 3.2.2–3.5.0 where restapi sessions are not invalidated after logout from webadmin, enabling remote authenticated users who know another user’s session data to assume that user’s privileges by swapping session tokens. Root cause: restapi session not invali...

CVE-2016-7851

creationtimestamp| type| source ---|---|--- 2016-11-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40742 2016-11-09 09:04:32+00:00| published-proof-of-concept| https://t.me/FullDisclosure/264...

Adobe Connect 9.5.7 - Cross-Site Scripting Vulnerability

Exploit for windows platform in category web applications Document Title: =============== Adobe Connect & Desktop v9.5.7 - Persistent Vulnerability References Source: ==================== Bulletin: https://helpx.adobe.com/security/products/connect/apsb16-35.html...

Adobe Connect 9.5.7 - Cross-Site Scripting

Document Title: =============== Adobe Connect & Desktop v9.5.7 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1838 Security ID: PSIRT-5180 Bulletin: https://helpx.adobe.com/security/products/connect/apsb16-35.html...

CVE-2016-7851

Adobe Connect versions 9.5.6 and earlier are affected by an input validation flaw in the events registration module that could enable cross-site scripting (XSS). This vulnerability is addressed by Adobe in APSB16-35, with a patch released for the product (notably 9.5.7 and newer per advisories). ...

SUSE SLES11 Security Update : ntp (SUSE-SU-2016:1311-1)

This network time protocol server ntp was updated to 4.2.8p6 to fix the following issues : Also yast2-ntp-client was updated to match some sntp syntax changes. bsc937837 Major functional changes : - The 'sntp' commandline tool changed its option handling in a major way. - 'controlkey 1' is added...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1247-1)

ntp was updated to version 4.2.8p6 to fix 28 security issues. Major functional changes : - The 'sntp' commandline tool changed its option handling in a major way, some options have been renamed or dropped. - 'controlkey 1' is added during update to ntp.conf to allow sntp to work. - The local cloc...

openSUSE Security Update : ntp (openSUSE-2015-767)

This ntp update provides the following security and non security fixes : - Update to 4.2.8p4 to fix several security issues bsc951608 : - CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK - CVE-2015-7855: decodenetnum will ASSERT botch instead of returni...

SOL17522 - NTP vulnerability CVE-2015-7851

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

FreeBSD-SA-15:25.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:25.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp REVISED Category: contrib Module: ntp Announced: 2015-10-26, revised on...

FreeBSD : ntp -- 13 low- and medium-severity vulnerabilities (c4a18a12-77fc-11e5-a687-206a8a720317)

ntp.org reports : NTF's NTP Project has been notified of the following 13 low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p4, released on Wednesday, 21 October 2015 : - Bug 2941 CVE-2015-7871 NAK to the Future: Symmetric association authentication bypass via crypto-NAK Cisco...