31 matches found
VertrigoServ 2.17 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications alert1 3. Solution: The product is discontinued. Update last version -- 0day.today 2019-03-09...
VertrigoServ 2.17 Cross Site Scripting
alert1 3. Solution: The product is discontinued. Update last version --...
Security Bulletin: Remote code execution possible due to insecure REST endpoint (CVE-2016-8938)
Summary IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications. Vulnerability Details CVEID: CVE-2016-8938 DESCRIPTION:...
CVE-2018-8938
A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 18.0. Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server...
CVE-2018-8938
Ipswitch WhatsUp Gold before 18.0 is affected by a Code Injection vulnerability in DlgSelectMibFile.asp. A specially crafted SNMP MIB file can cause arbitrary command/code execution on the WhatsUp Gold server. Affected: WhatsUp Gold versions prior to 18.0. Root cause: errors in code generation/ha...
CVE-2017-8938
The CVE-2017-8938 entry documents a vulnerability in the Radio Javan iOS app (versions 9.3.4–9.6.1) where the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. The connected records c...
CVE-2016-8938
CVE-2016-8938 affects IBM UrbanCode Deploy (UCD). The vulnerability allows remote code execution via a crafted file upload that replaces server code, with potential execution on UCD agent machines hosting production apps. IBM’s advisory lists affected versions (e.g., 6.0.x, 6.1.x, 6.2.x lines) an...
CVE-2015-8938
CVE-2015-8938 affects the MSM camera driver in Qualcomm components on Nexus 6 devices, where input parameter validation is incomplete, enabling privilege escalation via a crafted application. The issue is documented across multiple sources (e.g., CNVD-2016-06244) as a Nexus 6 privilege-acquisitio...
CVE-2015-8938
The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...
CVE-2015-8938
The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...
