CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

CVE-2019-12297

An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080...

CVE-2019-12297

An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080...

CVE-2019-12297

CVE-2019-12297 affects scopd on Motorola CX2 (1.01) and M2 (1.01). The issue is a Use of an Externally Controlled Format String in scopd, reachable via TCP port 8010 or UDP port 8080. Public details in multiple feeds confirm the vulnerable component and exposure surface; Red Hat and NVD entries r...

Motorola CX2 and Motorola M2 Formatting String Error Vulnerability

The Motorola M2 and Motorola CX2 are both products of Motorola, Inc.The Motorola M2 is a smartphone.The Motorola CX2 is a wireless router. A formatting string error vulnerability exists in scopd in Motorola CX2 version 1.01 and Motorola M2 version 1.01. There is an external control over the use o...

CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

Authentication flaw

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

CVE-2019-11321

CVE-2019-11321 affects Motorola CX2 1.01 and M2 1.01, where the router opens TCP port 8010 and accepts unauthenticated HNAP requests, enabling retrieval of information such as MAC addresses of connected clients. The root cause is exposed management interface on port 8010 without authentication. P...

CVE-2017-8010

...

CVE-2017-8010

CVE-2017-8010 entry is rejected and does not represent an active vulnerability.

Apache Solr XML External Entity Expansion Information Disclosure (CVE-2018-8010)

An XML external entity expansion vulnerability exists in Apache Solr. The vulnerability is due to improper handling of XML external entities. Successful exploitation results in the disclosure of file or directory contents for any file or directory readable by the Apache Solr service...

openSUSE Security Update : icinga (openSUSE-2018-1206)

This update for icinga fixes the following issues : Update to 1.14.0 - CVE-2015-8010: Fixed XSS in the icinga classic UI boo952777 - CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root boo1011630 and boo1018047 - CVE-2016-0726: removed the pre-configured...

openSUSE: Security Advisory for icinga (openSUSE-SU-2018:3258-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for icinga (moderate)

This update for icinga fixes the following issues: Update to 1.14.0 - CVE-2015-8010: Fixed XSS in the icinga classic UI boo952777 - CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root boo1011630 and boo1018047 - CVE-2016-0726: removed the pre-configured...

Security Bulletin: A vulnerability in Apache Solr (lucene) affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Solr lucene was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-8010 DESCRIPTION: Apache Solr could allow a remote attacker to obtain sensitive information, caused by an XML external entity expansion XXE in config files...

Apache Solr 6.x < 6.6.4 and 7.x < 7.3.1 XXE Vulnerability (SOLR-12316) - Linux

Apache Solr is prone to an XML external entity XXE expansion vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-8010

The CVE-2018-8010 issue affects Apache Solr 6.0.0–6.6.3 and 7.0.0–7.3.0, arising from an XML External Entity (XXE) expansion in Solr’s config files (solrconfig.xml, schema.xml, managed-schema) and related XInclude handling. An attacker could use XXE via file/ftp/http references to read arbitrary ...

CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

CVE-2015-8010

The CVE-2015-8010 issue is a Cross-Site Scripting (XSS) vulnerability in Icinga’s Classic-UI, exploitable via the CSV export link and pagination on cgi-bin/status.cgi. Affected software is Icinga prior to 1.14; the vulnerability is triggered by unvalidated query string input, allowing remote atta...