CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847: Out-of-bounds Write

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

PT-2018-13770

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A heap buffer out-of-bounds read/write access issue was discovered in the NVM Express Controller emulation of QEMU, specifically in the nvme cmb ops routines of the nvme device. This issue could...

Security vulnerabilities have been identified in products shipped with IBM Planning Analytics Express and IBM Cognos Express

Summary IBM Planning Analytics and IBM Cognos Analytics are shipped with IBM Planning Analytics Express. Information about security vulnerabilities affecting IBM Planning Analytics and IBM Cognos Analytics has been published in security bulletins. IBM Cognos Business Intelligence and IBM Cognos T...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +472 more potentially affected by CVE-2014-6393 via express (>=4.0.0, <=4.4.5)

express NPM version =4.0.0, =1.0.1, =1.0.0, =0.0.5-SNAPSHOT.11, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.7, =0.0.1, =1.3.2-1, =1.3.2-2 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

No Charset in Content-Type Header in express

Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of enforcing user's browser to set correct charset, could be leveraged by an attacker to perform a cross-site scripting attack, using non-standard...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +2427 more potentially affected by CVE-2014-6393 via express (>=3.0.0, <=3.10.5)

express NPM version =3.0.0, =0.0.1, =0.0.1, =0.0.1, =0.25.0, =1.0.4, =0.0.1, =0.0.4, =0.0.1, =0.0.6 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

GHSA-GPVR-G6GH-9MC2 No Charset in Content-Type Header in express

Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of enforcing user's browser to set correct charset, could be leveraged by an attacker to perform a cross-site scripting attack, using non-standard...

Private Data Disclosure in express-restify-mongoose

Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the following User...

GHSA-CGJX-MWPX-47JV Private Data Disclosure in express-restify-mongoose

Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the following User...

Mobility Express Software Denial of Service Vulnerability in Multiple Cisco Products

Cisco Aironet 1560 Series Access Point and others are wireless access point devices from Cisco. Mobility Express ME Software is a set of management and control software running on it. A security vulnerability exists in the ME Software in several Cisco products. An attacker in close physical...

express-jwt (>=2.0.0, <=2.0.1), maglev (>=3.0.1, <=3.1.1) potentially affected by CVE-2015-9235 via jsonwebtoken (4.0.0)

jsonwebtoken NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsonwebtoken and may be impacted: - express-jwt =2.0.0, =3.0.1, =3.1.1 Source cves: CVE-2015-9235 Source advisory: OSV:GHSA-C7HR-J4MJ-J2W6...

Cross-Site Scripting (XSS)

express-state is vulnerable to cross-site scriptingXSS. User input is not encoded before serialization and passed to expose. This allows an attacker to inject arbitrary Javascript into a victim's browser to steal session cookies or perform unwanted actions on behalf of the user...

Important: Red Hat Security Advisory: CloudForms 4.5.5 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 QFE: June 14, 2011

MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 QFE: June 14, 2011 Summary Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit the following Microsoft...

Micronet INplc SDK Untrusted Search Path Vulnerability

Micronet INplc SDK is a software-defined PLC Programmable Logic Controller development kit from Micronet Japan. An untrusted search path vulnerability exists in Micronet INplc SDK Express 3.08 and earlier and Pro+ 3.08 and earlier. An attacker could exploit this vulnerability to execute arbitrary...

SQL Injection

express-cart is vulnerable to SQL injection. A lack of user input sanitization in the login handlers allow attackers to inject MongoDB queries through the customer and admin login parameters. The vulnerability could be exploited to retrieve or modify arbitrary entries in the database...

JVN#59624986: Multiple vulnerabilities in INplc

INplc provided by MICRONET CORPORATION contains multiple vulnerabilities listed below. DLL preloading vulnerability CWE-427 - CVE-CVE-2018-0667 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H| Base Score: 7.8 CVSS v2| AV:N/AC:M/AU:N/C:P/I:P/A:P| Base Score...

Node.js third-party modules: [express-cart] Customer and admin email enumeration through MongoDB injection

I would like to report an injection in express-cart It allows to enumerate the email address of the customers and the administrators. Module module name: express-cart version: 1.1.7 npm page: https://www.npmjs.com/package/express-cart Module Description expressCart is a fully functional shopping...