2075 matches found
Arista Networks Extensible Operating System Input Validation Error Vulnerability
Arista Networks Extensible Operating System EOS is a suite of scalable operating systems for next-generation data center and cloud solutions from Arista Networks, Inc. in the United States. A security vulnerability exists in VxLAN in Arista Networks EOS. An attacker could exploit this vulnerabili...
SAP Commerce Input Validation Error Vulnerability
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. The product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce that stems from the Rest API program not securely...
CVE-2020-10629
WebAccess/NMS versions prior to 3.0.2 does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files...
Advantech WebAccess/NMS Input Validation Error Vulnerability
Advantech WebAccess/NMS is a web browser based software suite for Network Management Systems NMS. An input validation error vulnerability exists in Advantech WebAccess/NMS, which can be exploited by an attacker to obtain sensitive information via specially crafted XML input...
CVE-2019-4391
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
CVE-2020-5348
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...
[SECURITY] Fedora 32 Update: weechat-2.7.1-1.fc32
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
Fedora: Security Advisory for weechat (FEDORA-2020-4d232b48b8)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for weechat (FEDORA-2020-db890b4800)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the eap_request and eap_response functions in the PPP (Point-to-Point Protocol) daemon pppd allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the eaprequest and eapresponse functions in the PPP Point-to-Point Protocol daemon pppd protocol is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially...
[SECURITY] Fedora 31 Update: weechat-2.7.1-1.fc31
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
bima.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1117089 Security Researcher g0bl1nsec Helped patch 3759 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bima.co.uk website and it...
Siemens SiNVR 3 SQL Injection Vulnerability
SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a SQL injection vulnerability in the XML-based communication protocol by default, which can be exploited by remote attackers to read or modify the...
WAGO PFC200 Stack Buffer Overflow Vulnerability (CNVD-2020-16849)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A stack buffer overflow vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker could exploit this vulnerability via a specially crafted XML cache file to achieve code...
WAGO PFC200 Command Injection Vulnerability (CNVD-2020-16848)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A command injection vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker can exploit this vulnerability to inject OS commands via specially crafted XML cache files...
WAGO PFC200 Command Injection Vulnerability (CNVD-2020-16840)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A command injection vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker can exploit this vulnerability to inject OS commands via specially crafted XML cache files...
WAGO PFC200 Stack Buffer Overflow Vulnerability (CNVD-2020-16852)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A stack buffer overflow vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker could exploit this vulnerability via a specially crafted XML cache file to achieve code...
The vulnerability in the implementation of the Cisco Discovery protocol in Cisco NX-OS, Cisco FXOS, and Cisco IOS XR operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Discovery protocol in operating systems such as Cisco NX-OS, Cisco FXOS, and Cisco IOS XR is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
ppp: Buffer overflow in the eap_request and eap_response functions in eap.c
A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...
ppp: Buffer overflow in the eap_request and eap_response functions in eap.c
A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...