84 matches found
CVE-2020-8859
CVE-2020-8859 affects ELOG Electronic Logbook 3.1.4-283534d. The flaw is in HTTP parameter processing, where a crafted request can trigger a dereference of a null pointer, allowing remote attackers to cause a denial-of-service. Exploitation is unauthenticated and over the network, with the impact...
Elog Project Denial of Service (CVE-2019-3995; CVE-2020-8859)
A denial of service vulnerability exists in Elog. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
CVE-2018-8859
CVE-2018-8859 affects Echelon SmartServer 1, SmartServer 2 (before 4.11.007) and i.LON 100; i.LON 600 is not affected. The issue allows bypassing required authentication by appending extra characters to a directory name when selecting a directory, effectively bypassing security configured in the ...
CVE-2018-8859
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when...
postaisde.pt XSS vulnerability
Open Bug Bounty ID: OBB-637343 Description| Value ---|--- Affected Website:| postaisde.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
elseptimoarte.net XSS vulnerability
Open Bug Bounty ID: OBB-611902 Description| Value ---|--- Affected Website:| elseptimoarte.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
codes.iarc.fr XSS vulnerability
Open Bug Bounty ID: OBB-579540 Description| Value ---|--- Affected Website:| codes.iarc.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
entresaoneetsalon.fr XSS vulnerability
Open Bug Bounty ID: OBB-567289 Description| Value ---|--- Affected Website:| entresaoneetsalon.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
openSUSE Security Update : tre (openSUSE-2018-91)
This update for tre fixes one issue. This security issue was fixed : - CVE-2016-8859: Fixed multiple integer overflows which allowed attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggered an out-of-bounds write boo1005483 %NASLMINLEVEL 70300 C Tenable Netwo...
Veritas NetBackup Appliance 2.7.x / 3.0.x Remote Command Execution (VTS17-005)
According to its self-reported version, the remote Veritas NetBackup Appliance is 2.7.x or 3.0.x, and may be missing a vendor-supplied security patch. It is, therefore, affected by a remote command execution vulnerability due to improper validation of user-supplied input. An unauthenticated, remo...
CVE-2017-8859
Veritas NetBackup Appliance 2.7.x and 3.0.x are affected by a remote command execution vulnerability. An unauthenticated attacker can issue a crafted GET request (via /appliancews/getLicense with a hostName parameter) to execute arbitrary commands as root due to improper input validation. Nessus ...
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...
CVE-2016-8859
CVE-2016-8859 affects TRE and musl libc. The TRE library experienced multiple integer overflows in its regex/memory-handling paths, enabling memory corruption and an out-of-bounds write when processing large numbers of states or tags. Public advisories document this issue across multiple distribu...
UBUNTU-CVE-2015-8859
The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors...
DEBIAN-CVE-2015-8859
The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors...
CVE-2015-8859
The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors...
CVE-2015-8859
CVE-2015-8859 concerns the Node.js send package prior to 0.11.1, where an information leakage/root path disclosure vulnerability exists via unspecified vectors. Connected sources (GHSA-... and OSV entries) confirm this vulnerability, with remediation advised to upgrade to 0.11.1 or later. Affecte...
Fedora Update for tre FEDORA-2016-0a952a3bc0
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tre FEDORA-2016-0ff6c3d84b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...