CVE-2019-12703

The CVE-2019-12703 entry refers to Cisco SPA122/SPA112 series devices with a web-based management interface vulnerable to cross-site scripting. The root cause is insufficient validation of user-supplied input, enabling an unauthenticated, adjacent attacker to trigger XSS by sending crafted DHCP r...

Cisco SPA100 Series Analog Telephone Adapter Multiple Arbitrary Code Execution Vulnerabilities

Description Cisco SPA100 Series Analog Telephone Adapter is prone to multiple arbitrary code-execution vulnerabilities. Successfully exploiting these issues will allow attackers to execute arbitrary code with elevated privileges. These issues are being tracked by Cisco Bug ID CSCvq50494...

[SECURITY] Fedora 30 Update: gnome-disk-utility-3.32.1-2.fc30

This package contains the Disks and Disk Image Mounter applications. Disks supports partitioning, file system creation, encryption, fstab/crypttab editing, ATA SMART and other features...

Intel SSD Firmware Denial of Service - US

Lenovo Security Advisory: LEN-26626 Potential Impact: Denial of service Severity: Moderate Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5695 Summary Description: Intel has notified Lenovo of a vulnerability, requiring physical drive access, in the Intel® SSD 540s, Intel® Pro 5400s,...

Intel SSD Firmware Denial of Service - Lenovo Support US

No description provided...

Manage Engine ServiceDesk Plus 9.3 - Privilege Escalation Exploit

Exploit for windows platform in category web applications !/usr/bin/python Exploit Title: Manage Engine ServiceDesk Plus Version 9.3 Privileged Account Hijacking Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage: www.manageengine.com Product: Service Desk Plus...

CVE-2019-6551

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition...

Race condition

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition...

CVE-2019-6551

The CVE-2019-6551 vulnerability affects Pangea Communications Internet FAX ATA (Version 3.1.8 and prior). A specially crafted URL can bypass user authentication to force a reboot, enabling a continued denial-of-service condition. The issue is described as an authentication bypass via an alternate...

CVE-2019-6551

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition...

Pangea Communications Internet FAX ATA

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Pangea Communications Equipment: Internet FAX Analog Telephone Adapter ATA Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION...

CVE-2018-12037

An issue was discovered on Samsung 840 EVO and 850 EVO devices only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode, Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows...

PT-2018-10958 · Samsung +1 · Samsung T5 +6

Name of the Vulnerable Software and Affected Versions: Samsung 840 EVO versions affected versions not specified Samsung 850 EVO versions affected versions not specified Samsung T3 versions affected versions not specified Samsung T5 versions affected versions not specified Crucial MX100 versions...

Linux kernel information disclosure vulnerability (CNVD-2018-24479)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'aoediskdebugfsshow' function in the drivers/block/aoe/aoeblk.c file in Linux kernel 4.16.4rc4 and earlier versions. A local...

CVE-2018-10021

drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate attackers w...

ata-conference.org XSS vulnerability

Open Bug Bounty ID: OBB-592687 Description| Value ---|--- Affected Website:| ata-conference.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Intel® SSD 540s, Intel® SSD Pro 5400s, Intel® SSD E 5400s, and Intel® SSD DC S3100 data corruption vulnerability

Summary: A vulnerability was identified in the Intel® Solid-State Drive 540s Series, Intel® Solid State Drive Pro 5400s Series, Intel® Solid State Drive E 5400s Series and Intel® Solid State Drive DC S3100 Series leading to a potential data corruption issue. Description: In the Intel® SSD 540s,...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-562)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion by...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggeri...

Cisco ATA Detection (SIP)

SIP based detection of Cisco Analog Telephone Adapter ATA devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...