CVE-2018-7505

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application...

Tiny FTP Daemon Code Execution

The vulnerability of the FTP server Tiny FTP Daemon arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute arbitrary code...

MatrikonOPC Explorer File Transfer Vulnerability

MatrikonOPC Explorer is a free tool for viewing the data items contained in the OPC server and detecting OPC network communication. A file transfer vulnerability exists in MatrikonOPC Explorer that could allow an attacker to transfer unauthorized files from a host system...

FTP URI Processor cURL DoS

The vulnerability of the FTP URI handler of the software interface to interactions with servers via cURL arises due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2018-0244

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy to drop the Server Message Block SMB protocol if a malware file is detected. The vulnerability is due to how the SMB protocol handle...

Cisco Firepower System Software Server Message Block File Policy Bypass Vulnerability

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy to drop the Server Message Block SMB protocol if a malware file is detected. The vulnerability is due to how the SMB protocol handle...

MikroTik FTP Daemon Denial of Service Vulnerability

MikroTik is a set of routing operating system based on Linux core development of Latvian MikroTik company. The system turns a PC computer into a professional router. A security vulnerability exists in MikroTik version 6.41.4. A remote attacker can exploit the vulnerability to prevent the router...

FTPShell Client Buffer Overflow

The vulnerability of the FTPShell Client FTP client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause the application to terminate abnormally by sending a specially crafted...

Huawei Mate 9 MHA-L29B Near Field Communication Component Information Disclosure Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Near Field Communication NFC moudle is one of the Near Field Communication modules. An information disclosure vulnerability exists in the NFC component in Huawei Mate 9 versions prior to MHA-L29B 8.0.0.366 C567, which stems from the progra...

PT-2018-18330

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 versions prior to MHA-L29B 8.0.0.366C567 Description: The issue is related to an information leak due to insufficient validation on data transfer requests in the Near Field Communication NFC module. When an affected mobile phone...

openssh: Improper write operations in readonly mode allow for zero-length file creation

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

Arbitrary File Write

Overview org.apache.hive:hive-hplsql is a data warehouse software facilitates reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Arbitrary File Write via the File Transfer Protocol FTP client functionality...

Arbitrary File Write

Amendment This was deemed not a vulnerability. Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Arbitrary File Write via the File Transfer Protocol FTP client...

Schneider Electric uses hard-coded certificate vulnerability in several products

Schneider Electric Modicon Premium\Modicon Quantum\Modicon M340\Modicon BMXNOR0200 are programmable controllers from Schneider Electric, France. A hard-coded certificate vulnerability exists in various Schneider Electric products, which stems from an FTP server containing a hard-coded account tha...

Debian: Security Advisory (DLA-832-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack Buffer Overflow Vulnerability in Various Schneider Electric Products

Schneider Electric Modicon Premium\Modicon Quantum\Modicon M340\Modicon BMXNOR0200 are programmable controllers from Schneider Electric, France. A stack buffer overflow vulnerability exists in various Schneider Electric products, which stems from the FTP server not limiting the length of the...

Weak Encryption Algorithm Vulnerability in Various Schneider Electric Products

Schneider Electric Modicon Premium\Modicon Quantum\Modicon M340\Modicon BMXNOR0200 are programmable controllers from Schneider Electric, France. A weak cryptographic algorithm vulnerability exists in various Schneider Electric products, which stems from the FTP server not limiting the length of...

PT-2018-1294 · Schneider Electric · Modicon M340 +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers affected versions not specified Description: The issue is related to hard-coded accounts in the communication modules of the affected controllers...

Haxx curl buffer overflow vulnerability

Haxx curl is a set of file transfer tools from the Swedish company Haxx that work on the command line using URL syntax, the tool supports file uploads and downloads, and includes a libcurl client-side URL transfer library for program development. A buffer overflow vulnerability exists in FTP URL...

USN-3598-1 curl vulnerabilities

Phan Thanh discovered that curl incorrectly handled certain FTP paths. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2018-1000120 Dario Weisser discovered that curl incorrectly handled certain LDAP URLs. An attacker could possibly use this issue t...