3991 matches found
Design/Logic Flaw
Inteno DG400 WU7UELION3.11.6-1706141328 devices allow remote attackers to cause a denial of service connectivity loss via a series of packets with random MAC addresses, as demonstrated by macof...
CVE-2018-16950
CVE-2018-16950 affects Inteno DG400 devices (firmware build WU7U_ELION3.11.6-170614_1328). The vulnerability allows remote attackers to cause a denial of service (connectivity loss) by sending a sequence of packets with random MAC addresses, as demonstrated by macof. The issue arises from how the...
CVE-2018-1000666
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in method: notifySpaceModification; that can result in Improper validation ...
CVE-2018-1000666
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in method: notifySpaceModification; that can result in Improper validation ...
Command injection
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in method: notifySpaceModification; that can result in Improper validation ...
CVE-2018-1000666
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in method: notifySpaceModification; that can result in Improper validation ...
CVE-2018-1000666
CVE-2018-1000666 affects GIG Technology NV JumpScale Portal 7. The vulnerability is an OS Command Injection (CWE-78) in the notifySpaceModification method, arising from improper neutralization/validation of input parameters, allowing command execution. According to sources, the issue is exploitab...
Getting the most out of your branch local connection
In our global world of business, organizations often have multiple branch offices spanning every country. Some of these branches are quite large with their own IT infrastructure and personnel, while some are very small with just a few employees. In the past, these branch offices were connected to...
Securing the Convergence of IT with OT
The Industrial Internet of Things IIoT is the leading edge of the convergence of Operational Technology OT with IT. This convergence begins with network connectivity but requires enhancements in operational procedures, technology, and training as well. Beginning with the network, IT and OT use...
August 30, 2018—KB4346783 (OS Build 17134.254)
None None...
CVE-2018-1000225
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...
CVE-2018-1000225
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...
CVE-2018-1000225
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...
Design/Logic Flaw
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...
Cross site scripting
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...
CVE-2018-1000226
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...
CVE-2018-1000225
CVE-2018-1000225 is an XSS vulnerability in Cobbler’s web interface (cobbler-web) that can escalate privileges to admin. Technical details in the sources indicate the issue affects Cobbler versions at least as early as 2.0.0+ and is present in 2.6.11+ according to the description. The exploit pat...
Microsoft Windows: Allow network connectivity during connected-standby (plugged in)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbyplugged.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby plugged in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...
Microsoft Windows: Allow network connectivity during connected-standby (on battery)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbybattery.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby on battery Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...
