5002 matches found
Citrix ADC and Gateway directory traversal and XML file upload
Added: 01/13/2020 Background Citrix ADC formerly NetScaler ADC is an application delivery and load balancing platform. Citrix Gateway formerly NetScaler Unified Gateway is a secure workspace access and single sign-on solution. Problem A directory traversal vulnerability allows remote attackers to...
Citrix ADC and Gateway directory traversal and XML file upload
Added: 01/13/2020 Background Citrix ADC formerly NetScaler ADC is an application delivery and load balancing platform. Citrix Gateway formerly NetScaler Unified Gateway is a secure workspace access and single sign-on solution. Problem A directory traversal vulnerability allows remote attackers to...
PT-2020-9548 · Ricoh · Ricoh Sp C250Dn
Name of the Vulnerable Software and Affected Versions: Ricoh SP C250DN version 1.06 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For version 1.06, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...
Ruckus Unleashed Multiple Vulnerabilities (Jan 2020) - Active Check
Ruckus Unleashed is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2019-11103
Insufficient input validation in firmware update software for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11103
Insufficient input validation in firmware update software for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11103
CVE-2019-11103 involves insufficient input validation in Intel CSME firmware/update software. The issue can let an authenticated, locally located user potentially escalate privileges via the firmware/update subsystem. Affected are Intel CSME/AMT/DAL components with vulnerable firmware before 12.0...
Petwant PF-103 and Petalk AI Data Forgery Issue Vulnerabilities
Petwant PF-103 is an automated pet feeder from Petwant Pet Products China.Petalk AI is an automated pet feeder with monitoring function. A data forgery issue vulnerability exists in Petalk AI and PF-103, which arises from the program's use of the unencrypted HTTP protocol to perform firmware...
HPESBHF03974 rev.1 - HPE Servers using certain Intel Processors, Local Denial of Service, Disclosure of Information, Escalation of Privilege
Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to v2.10 HPE ProLiant ML30 Gen10 Server - Prior to v2.10 HPE ProLiant m710x Server Bla...
Siemens SCALANCE Privilege Escalation Vulnerabilities (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely; low skill level to exploit Vendor: Siemens Equipment: SCALANCE X-200 switch family and SCALANCE X-200IRT switch family Vulnerabilities: Privilege Escalation, Improper Authentication 2. UPDATE INFORMATION This updated advisory is a...
PT-2019-15571 · Shapeshift · Keepkey
Name of the Vulnerable Software and Affected Versions: ShapeShift KeepKey hardware wallet versions prior to 6.2.2 Description: The issue is related to insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet. This allows a partial reset of cryptographic secrets to...
CVE-2019-7183
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions...
Unexpected Page Fault in Virtualized Environment Advisory - Lenovo Support US
No description provided...
Intel Processors Voltage Settings Modification Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29846 Potential Impact: Escalation of Privilege, Information Disclosure Scope of Impact: Industry-wide Severity: High CVE Identifier: CVE-2019-11157 Summary Description: Intel reported a potential security vulnerability in some Intel CPUs may allow escalation of...
TCL Communication Alcatel Cingular Flip 2 B9HUAH1 Injection Vulnerability
The TCL Communication Alcatel Cingular Flip 2 B9HUAH1 is a cell phone from TCL Communication TCL, a Chinese company. A security vulnerability exists in the TCL Communication Alcatel Cingular Flip 2 B9HUAH1, which stems from an undocumented Web API in the device that allows JavaScript code to be...
PT-2019-15297 · Ge · Relion 670 Series +1
Name of the Vulnerable Software and Affected Versions: Relion 650 series versions 1.3.0.5 and prior Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior Description: An attacker may use a specially crafted message to force the device to reboot, which could cause a denial of service...
CVE-2019-16243
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...
CVE-2019-16243
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...
ThinkPad USB-C Dock Vulnerability - Lenovo Support US
No description provided...
TPM-Fail Attacks Against Cryptographic Coprocessors
Really interesting research: TPM-FAIL: TPM meets Timing and Lattice Attacks, by Daniel Moghimi, Berk Sunar, Thomas Eisenbarth, and Nadia Heninger. Abstract: Trusted Platform Module TPM serves as a hardware-based root of trust that protects cryptographic keys from privileged system and physical...