CVE-2019-13022

Bond JetSelect all versions has an issue in the Java class ENCtool.jar and corresponding password generation algorithm used to set initial passwords upon first installation. It XORs the plaintext into the 'encrypted' password that is then stored within the database. These steps are able to be...

Design/Logic Flaw

Bond JetSelect all versions has an issue in the Java class ENCtool.jar and corresponding password generation algorithm used to set initial passwords upon first installation. It XORs the plaintext into the 'encrypted' password that is then stored within the database. These steps are able to be...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 3 (3.5.3-18)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-33034 Assigning tier 0 to a cache disk makes no effect. The disk does not receive the "journaltier" parameter and can be used by storage disks of other tiers. Vulnerability id: VSTOR-33032 S3 cluster creation fails with a...

Error: "The operation could not be performed because a redo log is enabled on the Pool"

After upgradingSDX to 12.0 build, the user is gettingerror while trying to configure network settings for XenServer using LOM...

Synergy Systems & Solutions HUSKY RTU 6049-E70 Access Control Error Vulnerability (CNVD-2020-25373)

Synergy Systems & Solutions HUSKY RTU 6049-E70 is a Remote Terminal Unit RTU from Synergy Systems & Solutions, India. The Synergy Systems & Solutions HUSKY RTU 6049-E70 is vulnerable to an access control error that can be exploited by an attacker to view the network configuration via SNMP...

CVE-2020-8423

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 firmware version 3.16.9 devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network...

WAGO PFC200 iocheckd service "I/O-Check" cache Multiple Code Execution Vulnerabilities

Summary An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An...

CVE-2019-5142

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker ca...

Command injection

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker ca...

CVE-2019-5142

CVE-2019-5142 affects the Moxa AWK-3131A Series (firmware v1.13). The vulnerability is an OS command injection in the WAP hostname handling: a specially crafted entry to network configuration information can cause arbitrary system commands to execute, giving an attacker full control of the device...

CVE-2019-5142

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker ca...

Fedora: Security Advisory for systemd (FEDORA-2020-f8e267d6d0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2018-1188)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gallagher Command Centre Information Disclosure Vulnerability

Gallagher Command Centre is the central management tool for the Gallagher Access Control System. An information disclosure vulnerability exists in Gallagher Command Center versions 7.x prior to 7.90.991 MR5, 8.00 prior to 8.00.1161 MR5, and 8.10 prior to 8.10.1134 MR4. The vulnerability stems fro...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

Code injection

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

The CVE-2020-7249 entry describes an XSS vulnerability in SMC Networks SMC D3G0804W devices (version 3.5.2.5-LAT_GA). The issue enables stored or reflected XSS via the SSID field on the WiFi Network Configuration page after an admin login. Root cause is improper validation/handling of SSID data i...

ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection

ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage:...

ManageEngine Network Configuration Manager 12.2 - (apiKey) SQL Injection Vulnerability

Exploit for java platform in category web applications Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...