CVE-2021-29695

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

CVE-2020-4839

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

Design/Logic Flaw

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

CVE-2020-4839

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

CVE-2020-4839

CVE-2020-4839 affects IBM Host firmware for LC-class Systems (e.g., OP820 on 8335-GCA/GTA/GTB). The vulnerability is a stack-based buffer overflow caused by improper bounds checking, enabling a remote privileged attacker to cause a denial of service. Affected product details and CVSS scoring are ...

CVE-2021-27823

An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...

Information disclosure

An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...

CVE-2021-27823

An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...

NetWave System 信息泄露漏洞

Mediatek Net NetWave System is an application system from Mediatek Net, China. System for Navy Fleet Management An information disclosure vulnerability exists in NetWave System 1.0, which originates in index.class.php. The vulnerability allows an unauthenticated attacker to steal sensitive...

PT-2021-12194

Name of the Vulnerable Software and Affected Versions IBM Host firmware for LC-class Systems affected versions not specified Description The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. A remote privileged attacker could exploit this and cause a denial of...

PT-2021-18413

Name of the Vulnerable Software and Affected Versions IBM Host firmware for LC-class Systems affected versions not specified Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request. This could enable the attacker to delete...

CVE-2021-29695: Improper Limitation of a Pathname to a Restricted Directory

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

CVE-2020-4839: Out-of-bounds Write

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

CVE-2020-20907

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/languagegeneral.class.php and app/system/include/function/file.func.php...

CVE-2020-4839

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

CVE-2021-29695

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

MetInfo 路径遍历漏洞

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

LC-class Systems 缓冲区错误漏洞

LC-class Systems is a library classification system. Designed for the purposes and collections of the Library of Congress, it provides a guide to a library's actual collections. A buffer error vulnerability exists in LC-class Systems' IBM Host firmware, which is caused by improper boundary...

XStream Remote Code Execution Vulnerability (CNVD-2021-49071)

XStream is a Java class library , mainly used to serialize Java objects into XML or deserialized into objects that can be handled by the object type is almost unlimited . A remote code execution vulnerability exists in XStream versions 1.4.16 and earlier. The vulnerability stems from the fact tha...

Denial of Service Vulnerability in XStream

XStream is an open source Java class library developed by the XStream team , it is mainly used to serialize objects into XML JSON or deserialized into objects . A denial of service vulnerability exists in Xstream. An attacker can exploit the vulnerability to cause a denial of service attack...