CVE-2016-9064: Improper Certificate Validation

Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who could perform a man-in-the-middle attack on the user's connection to the update server and defeat the certificate pinning protection could provide a malicious...

Remote code execution

aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binar...

Media Streaming add-on Cross-Site Request Forgery Vulnerability

QNAP NAS application Media Streaming add-on is a video streaming loading application for QNAP NAS devices from QNAP Systems. A security vulnerability exists in QNAP NAS application Media Streaming add-on 421.1.0.2 and earlier and 430.1.2.0 and earlier, which stems from the program not implementin...

Media Streaming add-on request authentication vulnerability

The Media Streaming add-on is an add-on for each station in QTS that allows you to stream media simultaneously to different devices in different locations using AirPlay, DLNA, Chromecast, and HDMI-connected devices. A request authentication vulnerability exists in the QNAP NAS application Media...

QNAP NAS application Media Streaming add-on arbitrary OS command execution vulnerability

QNAP NAS application Media Streaming add-on is a video streaming loading application for QNAP NAS devices from QNAP Systems. A security vulnerability exists in the QNAP NAS application Media Streaming add-on version 421.1.0.2 and earlier and version 430.1.2.0 and earlier. A remote attacker can...

CVE-2017-7638

CVE-2017-7638 affects QNAP NAS Media Streaming add-on (versions 421.1.0.2, 430.1.2.0 and earlier). The vulnerability is that the add-on does not authenticate requests properly, which could allow an attacker to change Media Streaming settings and access sensitive information on the NAS. Connected ...

PT-2018-8419

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue concerns the lack of CSRF protections in the Media Streaming add-on, which could potentially allow for unauthorized actions...

PT-2018-1127

Name of the Vulnerable Software and Affected Versions Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue is related to the Media Streaming add-on's failure to neutralize special elements used in operating system commands. This can be exploited by a remote...

PT-2018-8417

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue is related to improper authentication of requests in the Media Streaming add-on. This could allow for unauthorized changes to Media...

CVE-2017-7640: Improper Neutralization of Special Elements used in an OS Command

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

PT-2018-8413

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML into the Media Streaming add-on. The injected co...

ICSA-18-018-01A Siemens SIMATIC WinCC Add-On (Update A)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC WinCC Add-On Vulnerabilities: Stack-based Buffer Overflow, Improper Input Validation, Improper Restriction of Operations within the Bounds of a Memory Buffer, Security Features, Improper...

The vulnerability of the Reporting Compatibility Add-On module of the OpenMRS Reference Application, which allows a violator to execute arbitrary code.

The vulnerability of the Reporting Compatibility Add-On module of the OpenMRS Reference Application, which is used for working with medical records, stems from the lack of an authentication process during deserialization of XML files into ReportSchema objects. Exploiting this vulnerability allows...

Google to Ditch Public Key Pinning in Chrome

Google said that in an upcoming version of Chrome it will deprecate the browser’s support for HTTP public key pinning. Instead, it will adopt the “safer” more flexible solution of Expect-CT headers. HTTP public key pinning HPKP is a browser security measure that protects against an SSL certificat...

CVE-2017-12796

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

Cross site request forgery (csrf)

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

CVE-2017-12796

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

CVE-2017-12796

The CVE-2017-12796 issue affects the OpenMRS Reporting Compatibility Add On prior to 2.0.4 (distributed in the OpenMRS Reference Application prior to 2.6.1). It does not authenticate users during XML deserialization into ReportSchema objects, allowing remote unauthenticated users to execute opera...

CVE-2017-12796

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

CVE-2017-12796: Deserialization of Untrusted Data

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...