CVE-2018-0661

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to bypass access restriction to add files on a specific directory that may result ...

CVE-2018-0661

The CVE-2018-0661 issue affects multiple I-O DATA network cameras (TS-WRLP, TS-WRLA, TS-WRLP/E) with firmware version 1.09.04 and earlier. A remote attacker on the same network segment can bypass access restrictions to add files in a specific directory, potentially enabling execution of arbitrary...

CVE-2018-16539

It was discovered that the ghostscript did not properly restrict access to files open prior to enabling the -dSAFER mode. An attacker could possibly exploit this to bypass the -dSAFER protection and disclose the content of affected files via a specially crafted PostScript document. Mitigation...

PT-2018-3607 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler version 0.68.0 Description: The issue is related to the Parser::getObj function in the Poppler library for rendering PDF files, which can cause infinite recursion when processing a crafted file. This can be exploited by a remote...

Design/Logic Flaw

Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins to uid 0 via the PubkeyAuthentication...

PT-2018-4572 · Uptime · Up.Time Monitoring Station

Name of the Vulnerable Software and Affected Versions: Up.Time Monitoring Station versions 7.4.0 build 13 through 7.5.0 build 16 Description: An issue in post2file.php allows an attacker to upload arbitrary files, including .php files that can execute arbitrary OS commands. Recommendations: For...

PT-2018-13263 · Plainview · Plainview Activity Monitor

Name of the Vulnerable Software and Affected Versions: Plainview Activity Monitor plugin versions prior to 20180826 Description: The issue allows for OS command injection via shell metacharacters in the ip parameter of a "wp-admin/admin.php?page=plainview activity monitor&tab=activity tools"...

PT-2018-16309 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the insecure extraction of fields from the "shard" table in the SQLite database by the video-core process, leading to a buffer overflow on the stack. This...

Mozilla Firefox < 59 Multiple Vulnerabilities

Binary data 700328.prm...

PT-2018-3498

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.50 Description: An issue was discovered in mod alias physical handler in mod alias.c, allowing potential ../ path traversal of a single directory above an alias target. This occurs with a specific mod alias...

Design/Logic Flaw

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow access restriction bypass...

CVE-2018-7095

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow access restriction bypass...

CVE-2018-7095

The CVE-2018-7095 entry describes an access-restriction bypass in HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110 (MU7). The CNVD/NVD records confirm a remote bypass vulnerability in SP that could allow unauthorized access; exploitation status and concrete remediation are not provided in...

CVE-2018-7095

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow access restriction bypass...

PT-2018-6275 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue allows an attacker to send an authenticated HTTP request to trigger a buffer overflow. Specifically, the s mac key value is copied to a 25-byte buffer using strcpy. Sending a value longer than 2...

PT-2018-5645 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: A buffer overflow issue exists due to the incorrect handling of the URL parameter during a firmware update request by the HTTP server implementation, leading to a buffer overflow on a global section. An...

PT-2018-6276 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: An attacker could send an authenticated HTTP request to trigger this issue in Insteon Hub. The value for the s vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes...

CVE-2018-14432

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all...

CVE-2018-14432

Summary of CVE-2018-14432 (OpenStack Keystone federation) : An authenticated GET to /v3/OS-FEDERATION/projects could bypass access controls and disclose all projects and their attributes when Keystone’s /v3/OS-FEDERATION endpoint is enabled via policy.json. Affected releases include OpenStack Key...

Authentication flaw

NEC Platforms Calsos CSDX and CSDJ series products CSDX 1.37210411 and earlier, CSDXP 4.37210411 and earlier, CSDXD 3.37210411 and earlier, CSDXS 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00 allows remote...