WordPress Woocommerce Category Banner Management Plugin <= 1.1.0 Unauthenticated Settings Change Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112423";...

Lexmark Printer Buffer Overflow Vulnerability (CVE-2018-15520)

Multiple Lexmark printers are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Appweb < 7.0.3 authCondition Authentication Bypass Vulnerability

According to its banner, the version of Appweb installed on the remote host is prior to 7.0.3. It is, therefore, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. Note...

CVE-2018-18725

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

YUNUCMS cross-site scripting vulnerability (CNVD-2018-23277)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 admin/banner/editbanner?id=20 cross-site scripting vulnerability , attackers can exploit the vulnerability of cross-site attacks...

Hikvision IP Camera Detection (HTTP)

HTTP based detection of Hikvision IP camera devices. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PostgreSQL 'Interactive Installer' Arbitrary Code Execution Vulnerability - Windows

PostgreSQL is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Asterisk 13.x < 13.23.1 / 14.x < 14.7.8 / 15.x < 15.6.1 / 13.21 < 13.21-cert3 HTTP Websocket Stack Overflow (AST-2018-009)

According to its SIP banner, the version of Asterisk running on the remote host is 13.x prior to 13.23.1, 14.x prior to 14.7.8, 15.x prior to 15.6.1, or 13.21 prior to 13.21-cert3. It is therefore, affected by an error related to the reshttpwebsocket.so module that allows a stack overflow error a...

CVE-2018-14803

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to t...

CVE-2018-14803

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to t...

CVE-2018-14803

Philips e-Alert Unit (non-medical device), Version R2.1 and prior, is affected by CVE-2018-14803 which describes an information-disclosure vulnerability: an attacker could obtain extraneous product information (e.g., OS/software components) via HTTP response headers that are normally not exposed....

Cisco Video Surveillance Manager Detection

Detection of Cisco Video Surveillance Manager. The script sends a connection request to the server and attempts to detect Cisco Video Surveillance Manager and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

kofferprofi.de XSS vulnerability

Open Bug Bounty ID: OBB-678982 Description| Value ---|--- Affected Website:| kofferprofi.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Elastic Elasticsearch 'CVE-2018-3831' Information Disclosure Vulnerability - Linux

Elasticsearch is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PowerDNS Security Advisory 2016-02: Crafted queries can cause abnormal CPU usage

An issue has been found in PowerDNS allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if the system becomes overloaded. SPDX-FileCopyrightText: 2018 Greenbone AG...

PacsOne Detection

Detection of PacsOne Server. The script sends a connection request to the server and attempts to detect PacsOne Server and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Infoblox NetMRI Administration Shell Escape and Privilege Escalation Vulnerability

The administrative shell of Infoblox NetMRI is prone to shell escape and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Red Hat OpenShift Detection (HTTP)

HTTP based detection of Red Hat OpenShift. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.141450...

Cisco Network NVF Infrastructure Software (NFVIS) Detection (HTTP)

HTTP based detection of Cisco Network NVF Infrastructure Software NFVIS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSSH 'auth2-gss.c' User Enumeration Vulnerability - Windows

OpenSSH is prone to a user enumeration vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...