CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3449

CVE-2014-3449 affects BSS Continuity CMS 4.2.22640.0, exposing an Authentication Bypass due to insufficient ACLs that allowed unauthenticated access to the admin interface. The vulnerability was demonstrated by exposing the administrative path /wcm/system/pages/newui/admin.aspx, enabling bypass w...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3448

The CVE-2014-3448 issue affects BSS Continuity CMS 4.2.22640.0. Affected component is the ASPX file upload handler, which allows unauthenticated uploads without verifying file type or origin. The root cause is inadequate validation in the upload functionality, enabling remote code execution by pl...

CVE-2014-3447

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

CVE-2014-3447

CVE-2014-3447 affects BSS Continuity CMS 4.2.22640.0 . The vulnerability allows a remote, unauthenticated attacker to overload the underlying database by repeatedly calling a node enumeration script, leading to a Denial of Service within minutes. The issue arises from heavy processing within the ...

PT-2020-7648

Name of the Vulnerable Software and Affected Versions BSS Continuity CMS version 4.2.22640.0 Description The issue is related to a Remote Code Execution vulnerability caused by unauthenticated file upload. Recommendations For version 4.2.22640.0, update to a newer version that contains a fix for...

CVE-2014-3449: Missing Authentication for Critical Function

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3448: Unrestricted Upload of File with Dangerous Type

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3447: Uncontrolled Resource Consumption

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

PT-2020-7649

Name of the Vulnerable Software and Affected Versions BSS Continuity CMS version 4.2.22640.0 Description The issue is related to an Authentication Bypass. Recommendations For version 4.2.22640.0, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2014-10398

The CVE-2014-10398 entry describes multiple XSS vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client’s bsi.dll (Private Client/ Retail Client, versions 2.5, 2.4 and earlier). The issue allows remote attackers to inject arbitrary script/HTML via parameters DICTIONARY, FILTERIDENT, FROMSCHEME, ...

CVE-2014-4196

The CVE-2014-4196 entry describes an XSS vulnerability in Bank Soft Systems (BSS) RBS BS-Client 3.17.9, exploitable via the colorstyle parameter in bsi.dll. The impact is as described by the NVD entry; no exploit code or in-the-wild details are provided in the connected documents. Remediation det...

PT-2020-7673

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the colorstyle parameter. This could potentially lead to unauthorized actions on...

PT-2020-7597

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client versions 2.5, 2.4, and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including...

CVE-2014-10398: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in bsi.dll in Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 DICTIONARY, 2 FILTERIDENT, 3 FROMSCHEME, 4 FromPoint, ...

CVE-2019-18671

Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attacke...

CVE-2019-18671

CVE-2019-18671 affects the ShapeShift KeepKey hardware wallet. Insufficient checks in USB packet handling allow out-of-bounds writes in the .bss segment on firmware up to 6.2.1, with potential code execution or other impact. The issue can be triggered by unauthenticated users and is reachable via...

CVE-2019-18671

Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attacke...

kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c

A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code...