7615 matches found
CVE-2018-1000824
MegaMek version v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000824
CVE-2018-1000824 affects MegaMek for versions
CVE-2018-1000829
The CVE affects Anyplace released code prior to commit 80359b4, containing a XML External Entity (XXE) vulnerability in the Man-in-the-middle on map API call. This can lead to disclosure of confidential data, denial of service, SSRF, and port scanning. The issue appears fixed in the code after co...
CVE-2018-1000834
The CVE-2018-1000834 entry concerns Runelite (versions
PT-2018-9544 · Neo4J Contrib · Neo4J-Apoc-Procedures
Name of the Vulnerable Software and Affected Versions: neo4j-contrib neo4j-apoc-procedures versions before commit 45bc09c Description: The issue is related to a XML External Entity XXE vulnerability in the XML Parser. This can result in disclosure of confidential data, denial of service,...
PT-2018-9549 · Freecol +1 · Freecol +1
Name of the Vulnerable Software and Affected Versions: FreeCol versions prior to nightly-2018-08-23 Description: The issue concerns a XML External Entity XXE vulnerability in the FreeColXMLReader parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request...
Icinga Web 2 < 2.6.2 Multiple Vulnerabilities
Icinga Web 2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icingaweb2";...
PT-2018-3820 · Freeware +2 · Faad2 +2
Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8 Description: The issue is related to a stack-based buffer overflow in the calculate gain function within the libfaad/sbr hfadj.c component of the Freeware Advanced Audio Decoder 2 FAAD2...
Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR
Overview Aterm WF1200CR and Aterm WG1200CR provided by NEC Corporation contain multiple vulnerabilities listed below. Information disclosure CWE-200 - CVE-2018-16192 Stored cross-site scripting CWE-79 - CVE-2018-16193 OS command injection CWE-78 - CVE-2018-16194 OS command injection in SOAP...
IBM Operational Decision Manager XML External Entity Injection Vulnerability (CNVD-2018-26896)
IBM Operational Decision Manager is a suite of operational decision management software from IBM in the United States. The software integrates business events and business rules to automate and monitor recurring decisions across processes and applications. A security vulnerability exists in IBM...
PT-2018-10991 · Avanti Markets · Marketcard
Name of the Vulnerable Software and Affected Versions: Avanti Markets MarketCard affected versions not specified Description: A vulnerability exists due to the lack of proper validation of the UPC bar code on the MarketCard. This could allow an unauthenticated, local attacker to access funds with...
IBM Marketing Platform XML External Entity Injection Vulnerability
IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. An XML external entity injectio...
IBM Marketing Platform XML External Entity Injection Vulnerability (CNVD-2018-26364)
IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. An XML external entity injectio...
The vulnerability of the mod_auth_digest module in the Apache HTTP Server allows a hacker to disclose or compromise the integrity of the protected information.
The vulnerability of the modauthdigest module in the Apache HTTP Server is related to the generation of insecure initialization vectors nonces. Exploiting this vulnerability allows a remote attacker to perform attacks based on Replay attacks on servers belonging to the Diges domain...
The vulnerability of the Extensible Authentication Protocol over LAN (EAPOL) implementation in Cisco router microsoftware of the Small Business 100 Series and Small Business 300 Series models allows a hacker to disclose protected information.
The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in Cisco router software of the Small Business 100 Series and Small Business 300 Series models arises due to errors in the EAPOL message processing mechanism during Wi-Fi connection establishment. Exploiting...
Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00673)
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the getportalinfo method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to determine sensitive device information by sending a...
OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JSSE. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with...
PT-2018-3683 · Google +9 · Libwebp +9
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A heap-based buffer overflow was found in libwebp, related to a buffer overflow issue when reading beyond the buffer boundaries in memory. This issue can be exploited by a remote attacker to gain...
IBM WebSphere Application ServerXML External Entity Injection Vulnerability
IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An XML external entity injection vulnerability exists in IBM...
