8977 matches found
November 12, 2019—KB4525241 (OS Build 16299.1508)
None None...
October 8, 2019—KB4520008 (OS Build 17134.1069)
None None...
Linear eMerge E3 1.00-06 card_scan_decoder.php Command Injection
!/usr/bin/env python Linear eMerge E3 Unauthenticated Command Injection Remote Root Exploit Affected version: =1.00-06 via cardscandecoder.php CVE: CVE-2019-7256 Advisory: https://applied-risk.com/resources/ar-2019-005 Paper: https://applied-risk.com/resources/i-own-your-building-management-syste...
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges...
DEBIAN-CVE-2019-10222
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...
CVE-2019-10222
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...
Information disclosure
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...
CVE-2019-3422
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...
Pixel 1, RIP: Google Ends Support After Just Three Years
The original Google Pixel didn't make the cut for this month's Android security patches...
TYPO3 SQL Injection Vulnerability (CNVD-2019-40296)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A SQL injection vulnerability exists in the back-end of TYPO3, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited...
DEBIAN-CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
Cross site scripting
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
UBUNTU-CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
SQL Injection Vulnerability in the Front-end of the Intelligent Graphical Management System for Office Premises of New ChengSoft Technology Co.
The new ChengSoft intelligent graphic management system for office buildings adopts universal functional design, is a suitable for ministries and commissions, provinces, cities, districts and counties organ affairs management departments as well as large-scale enterprises, scientific research...
Notice of Status Change Announcement for Version 12.1 of the Citrix ADM
Citrix Systems, Inc. announces an update to End of Maintenance and End of Life dates for version 12.1 of the Citrix Application Delivery Management formerly referred to as NetScaler Management & Analytics System Citrix Application Delivery Management ADM product lifecycle model will change from 3...
VMSA-2019-0019 : Denial-of-service vulnerability
ESXi shader denial-of-service vulnerability - CVE-2019-5536 VMware ESXi, Workstation and Fusion contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on...
SQL injection vulnerability in the de*** method of the ad***_ne***.php file in the backend of seacms
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file de method exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
Notice of Change Announcement for Version 11.1 of the Citrix Application Delivery Management (ADM)
Citrix Systems, Inc. announces End of Maintenance for version 11.1 of the Citrix Application Delivery Management formerly referred to as NetScaler Management & Analytics System Citrix Application Delivery Management ADM follows a 3-year product lifecycle model. Table 1. Release Milestones and Dat...