PT-2021-22110 · Boston Scientific · Zoom Latitude +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns the presence of unpatched vulnerabilities in off-the-shelf software components used by the affected device. A malicious attacker with physical access to the devic...

FFmpeg Input Validation Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39940)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite.Oracle Trade...

File upload vulnerability in We7 CMS (CNVD-2021-24741)

We7 CMS is a domestic asp.net-based at the same time with open source and open plug-in CMS system. A file upload vulnerability exists in We7 CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Multiple Intel® Server Information Disclosure Vulnerabilities

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Multiple Intel® Server information disclosure vulnerability can be exploited by attackers to potentially make information public via local access...

Directory Traversal Vulnerability in Thunderwind Movie CMS

Thunderwind Movie CMS is a PHP development, based on THINKPHP framework development suitable for all kinds of video, film and television websites, film and television content management system. Thunderwind CMS has a directory traversal vulnerability that can be exploited by an attacker to read an...

Multiple MobileIron Products Information Disclosure Vulnerabilities

MobileIron Core is a management console component of the MobileIron platform from MobileIron, Inc. The product supports the definition of security and management policies for devices, applications and content. A security vulnerability exists in MobileIron Core 10.6 and earlier and Connector 10.6...

Palo Alto Networks PAN-OS Data Forgery Issue Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A data forgery issue vulnerability exists in SAML authentication in Palo Alto Networks PAN-OS, which arises from the program failing to properly verify signatures. An attacker could explo...

Zammad has an authorization problem vulnerability (CNVD-2021-22174)

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an authorization issue vulnerability that can be exploited by an attacker to access recent tickets, merge tickets, and split ticket functionality...

CVE-2018-20604

CVE-2018-20604 affects Lei Feng TV CMS (LFCMS) 3.8.6. A Directory Traversal is possible by crafting URIs using ..* in Template/edit/path, e.g., admin.php?s=/Template/edit/path/web .... ..*..*1.txt.html, enabling reading of arbitrary files (demonstrated with 1.txt). The connected records confirm t...

MGASA-2018-0469 Updated mariadb packages fix security vulnerabilities

Some easily exploitable vulnerabilities allowing high privileged attacker with network access via multiple protocols to compromise MySQL Server have been fixed...

AVIPreview 0.26 Alpha - Denial of Service

AVIPreview 0.26 Alpha - Denial of Service done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7...

Levent Veysi Portal 1.0 - Oku.asp SQL Injection

Levent Veysi Portal 1.0 - Oku.asp SQL Injection source: https://www.securityfocus.com/bid/24794/info Levent Veysi Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by...

Linux chfn (SuSE 9.310) - Local Privilege Escalation

Linux chfn SuSE 9.310 - Local Privilege Escalation !/bin/sh Exploit for SuSE Linux 9.1,2,3/10.0, Desktop 1.0, UnitedLinux 1.0 and SuSE Linux Enterprise Server 8,9 'chfn' local root bug. by Hunger Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html hunger@suse: id...

Naxtor E-directory 1.0 - default.asp SQL Injection

Naxtor E-directory 1.0 - default.asp SQL Injection source: https://www.securityfocus.com/bid/14469/info Naxtor E-directory is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

CuteNews <= 1.3.6 Multiple XSS

According to its version number, the remote host is running a version of CuteNews that allows an attacker to inject arbitrary script through the variables 'X-FORWARDED-FOR' or 'CLIENT-IP' when adding a comment. On one hand, an attacker can inject a client-side script to be executed by an...

CVE-2001-1367

The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges...

Edimax 7205APL

Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...

herberlin bremsserver 1.2.4/3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/9493/info Herberlin BremsServer is prone to a directory-traversal vulnerability. An attacker may exploit this issue to gain access to files residing outside the web server root directory of the affected system. This issue exists due to a failure to valida...

CVE-2003-0518

The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow...