Cisco Unity Express Arbitrary Command Execution Vulnerability

A Java deserialization vulnerability in Cisco Unity Express CUE could allow an unauthenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An...

PT-2018-1847

Name of the Vulnerable Software and Affected Versions Cisco Unity Express affected versions not specified Description The issue is related to a Java deserialization vulnerability. It occurs when the software insecurely deserializes user-supplied content, specifically Java objects, through the Jav...

QEMU NVM Express Controller Heap Buffer Overflow Vulnerability

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard.NVM Express Controller is one of the NVMe Non-Volatile Memory Host Controller Interface Specification controller components. The NVM Express Controller emulation in QEMU suffers from a heap buffer overflow...

Heap overflow

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

CVE-2018-16847 describes an out-of-bounds heap read/write in the NVMe Controller emulation inside QEMU, within nvme_cmb_ops in an nvme device. The flaw could allow a guest user/process to crash the QEMU process (DoS) and potentially execute code with QEMU process privileges. The description does ...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847: Out-of-bounds Write

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

PT-2018-13770

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A heap buffer out-of-bounds read/write access issue was discovered in the NVM Express Controller emulation of QEMU, specifically in the nvme cmb ops routines of the nvme device. This issue could...

Security vulnerabilities have been identified in products shipped with IBM Planning Analytics Express and IBM Cognos Express

Summary IBM Planning Analytics and IBM Cognos Analytics are shipped with IBM Planning Analytics Express. Information about security vulnerabilities affecting IBM Planning Analytics and IBM Cognos Analytics has been published in security bulletins. IBM Cognos Business Intelligence and IBM Cognos T...

GHSA-GPVR-G6GH-9MC2 No Charset in Content-Type Header in express

Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of enforcing user's browser to set correct charset, could be leveraged by an attacker to perform a cross-site scripting attack, using non-standard...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +472 more potentially affected by CVE-2014-6393 via express (>=4.0.0, <=4.4.5)

express NPM version =4.0.0, =1.0.1, =1.0.0, =0.0.5-SNAPSHOT.11, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.7, =0.0.1, =1.3.2-1, =1.3.2-2 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

No Charset in Content-Type Header in express

Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of enforcing user's browser to set correct charset, could be leveraged by an attacker to perform a cross-site scripting attack, using non-standard...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +2427 more potentially affected by CVE-2014-6393 via express (>=3.0.0, <=3.10.5)

express NPM version =3.0.0, =0.0.1, =0.0.1, =0.0.1, =0.25.0, =1.0.4, =0.0.1, =0.0.4, =0.0.1, =0.0.6 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

Private Data Disclosure in express-restify-mongoose

Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the following User...

GHSA-CGJX-MWPX-47JV Private Data Disclosure in express-restify-mongoose

Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the following User...

Mobility Express Software Denial of Service Vulnerability in Multiple Cisco Products

Cisco Aironet 1560 Series Access Point and others are wireless access point devices from Cisco. Mobility Express ME Software is a set of management and control software running on it. A security vulnerability exists in the ME Software in several Cisco products. An attacker in close physical...