CVE-2018-14077: Undefined Security Weakness

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

PT-2018-12325

Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to backup the device configuration. This is achieved by sending a direct request to the "/Maintenance/configfile.cfg" API endpoint...

Downloads Resources over HTTP in haxe3

Affected versions of haxe3 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

DEBIAN-CVE-2018-14722

An issue was discovered in evaluateautomountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-scrub,balance,trim are set to auto in /etc/sysconfig/btrfsmaintenance this is not the default, thou...

Multiple Vulnerabilities in the Mobile Maintenance APP of China Mobile Communications Group Anhui Co.

Mobile Maintenance APP is a mobile office software for China Mobile's operation and maintenance staff, providing functions including resource management, portal management, work order dispatching and attendance statistics. There are multiple vulnerabilities in the Mobile Maintenance APP of China...

CoSoSys Endpoint Protector 4.5.0.1 - (Authenticated) Remote Root Command Injection

CoSoSys Endpoint Protector 4.5.0.1 - Authenticated Remote Root Command Injection Title : CoSoSys Endpoint Protector - Authenticated Remote Root Command Injection Date : Vulnerability submitted in 01/12/2017 and published in 01/08/2018 Author : 0x09AL Tested on : Endpoint Protector 4.5.0.1 Softwar...

InduSoft Web Studio TCP/IP Code Execution

The vulnerability of the TCP/IP component in InduSoft Web Studio and InTouch Machine Edition HMI/SCADA systems arises from buffer overflows due to deficiencies in input data processing tags, events, signaling messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

Design/Logic Flaw

MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel Tools and Maintenance - Task Manager - Add New Task that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality (CVE-2016-9840, CVE-2016-9841, CVE-2017-1297, CVE-2017-1105)

Summary IBM DB2 is shipped as components of IBM Predictive Maintenance and Quality. Information about some security vulnerability affecting IBM DB2 have been published their respective security bulletins. Vulnerability Details Please consult the security bulletin IBM® DB2® LUW on AIX and Linux...

Security Bulletin:A security vulnerability has been identified in IBM DB2 and IBM SPSS Modeler

Summary IBM DB2 and IBM SPSS Modeler are shipped as components of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 and IBM SPSS Modeler has been published their respective security bulletins. Vulnerability Details Please consult the Security...

Security Bulletin: Open Source Apache CXF Vulnerablities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2017-12624)

Summary Vulnerabilities in Open Source Apache CXF affect IBM Tivoli Application Dependency Discovery Manager Vulnerability Details CVE-ID: CVE-2017-12624 DESCRIPTION: Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could...

Security Bulletin: IBM InfoSphere Information Server sometimes records sensitive data when an installation fails (CVE-2013-5440)

Summary In certain situations after a specific error has been encountered and InfoSphere Information Server installation fails, sensitive data is recorded in a file. For releases 8.5 and earlier this vulnerability can occur only when updating an existing installation with maintenance. For release...

Security Bulletin: IBM® DB2® contains a file disclosure vulnerability in the database automated maintenance feature (CVE-2015-1883)

Summary IBM DB2 contains a file disclosure vulnerability in the database automated maintenance feature. A remote, authenticated DB2 user with elevated privilege could exploit this vulnerability by manipulating an automated maintenance policy stored procedure to view any files owned by the DB2...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality. Information about some security vulnerabilities affecting IBM DB2 have been published their respective security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affecte...

Security Bulletin: OpenSSL Heartbleed Vulnerability

Summary OpenSSL Heartbleed Vulnerability OpenSSL 1.0.1 through 1.0.1f inclusive are vulnerable Vulnerability Details What is OpenSSL Heartbleed The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information...

Security Bulletin: A security vulnerability has been identified in multiple products shipped with IBM Predictive Maintenance and Quality: CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-757

Summary IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM ILOG CPLEX Optimization Studio, IBM SPSS Analytic Server and IBM SPSS Modeler are shipped as components of IBM...

Security Bulletin: A security vulnerability has been identified in IBM DB2 LUW shipped with IBM Predictive Maintenance and Quality (CVE-2016-0211)

Summary : IBM DB2 is shipped as a component of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Vulnerability in IBM DB2 LUW contains a denial...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality (CVE-2016-0215)

Summary IBM DB2 is shipped as a component of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Vulnerability in IBM DB2 LUW contains a denial o...