CVE-2021-25150

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aru...

Aruba Access Points 输入验证错误漏洞

Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points, which can be exploited by an attacker to remotely read arbitrary files. The following products and versions are affected: Aruba Instant 6.4.x:...

Aruba Instant Access Point 命令注入漏洞

Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points that allows arbitrary commands to be executed remotely. The following products and versions are affected: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and...

CVE-2020-25231

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3, LOGO! Soft Comfort All versions V8.3. The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program fil...

Packwood MPXJ Path Traversal Vulnerability

Packwood MPXJ is a tool from Packwood that supports multiple programming languages for processing project information.MPXJ supports a variety of data formats: Microsoft Project Exchange MPX, Microsoft Project MPP, MPT, Microsoft Project Data Exchange MSPDI XML, Microsoft Project Database MPD,...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co.

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. A denial of service vulnerability exists in the Beijing Sifang Relay Automation Company Limited CSC-830, which can be exploited by ...

Linux kernel information disclosure vulnerability (CNVD-2020-51796)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in Linux kernel before version 5.8.3, which stems from a TOCTOU mismatch in the NFS client code. An attacker can exploit...

CVE-2020-4686

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678...

OpenSSH Command Injection Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools from the OpenBSD Project Group for secure access to remote computers. The tools are an open source implementation of the SSH protocol and support encryption of all transmissions, effectively blocking eavesdropping, connection hijacking, an...

Unspecified Vulnerability in Oracle Enterprise Session Border Controller

Oracle Enterprise Session Border Controller E-SBC connects disparate Internet Protocol IP communications networks while mitigating security threats, resolving interoperability issues, and ensuring reliable communications. A security vulnerability exists in the File Upload component in Oracle...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32087)

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.12, where the program creates data for each page at the application level. An attacker could exploit the vulnerability to consume large amounts of memory...

Fork CMS Cross-Site Scripting Vulnerability (CNVD-2020-31119)

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork versions prior to 5.8.3. The vulnerability stems from the lack of proper validation of...

NETGEAR WAC505 and WAC510 Information Disclosure Vulnerability

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WAC505 version prior to V5.6.8.3 and the WAC510 version prior to V5.6.8.3, which can be exploited by an attacker to obtain sensitive information...

GitLab Information Disclosure Vulnerability (CNVD-2020-17383)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A security vulnerability exists in GitLab versions 8.3 through 12.8.1. An attacker can exploit the...

LabVantage LIMS Information Disclosure Vulnerability

LabVantage Solutions LIMS is a laboratory letter management system from LabVantage Solutions in the United States. An information disclosure vulnerability exists in LabVantage LIMS 8.3. The vulnerability stems from LabVantage LIMS failing to properly maintain the confidentiality of database names...

Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.4 and...

HPE enhanced Internet Usage Manager Cross-Site Scripting Vulnerability

HPE enhanced Internet Usage Manager eIUM is a real-time billing platform from Hewlett Packard Enterprise HPE, USA. The platform provides features such as charge control and session management. A cross-site scripting vulnerability exists in HPE eIUM versions 8.3 and 9.0. An attacker could exploit...

CODOFORUM Cross-Site Scripting Vulnerability

Codoforum is a free forum package built with PHP and MySQL. A cross-site scripting vulnerability exists in the administration dashboard in Codoforum 4.8.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the Categories in the Manage Users screen...

Ahsay Systems Cloud Backup Suite Arbitrary File Upload Vulnerability

Ahsay Systems Cloud Backup Suite is a centralized cloud backup solution from Ahsay Systems in Hong Kong, China. The product supports features such as database backup and physical server backup. A security vulnerability exists in Ahsay Systems Cloud Backup Suite version 8.3.0.30. The vulnerability...

PT-2020-18395 · Codoforum · Codoforum

Name of the Vulnerable Software and Affected Versions: Codoforum version 4.8.3 Description: The issue allows for XSS attacks through posts using parameters such as display name, title name, or content. Recommendations: For Codoforum version 4.8.3, update to a newer version that contains a fix for...