RICOH SP 4520DN Code Injection Vulnerability

The RICOH SP 4520DN is a multifunction printer from Ricoh Japan. A code injection vulnerability exists in the RICOH SP 4520DN, which arises from a network system or product that does not properly filter specific elements of externally inputted data during the construction of a code segment, and c...

CVE-2018-4065

An exploitable cross-site scripting vulnerability exists in the ACEManager pingresult.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP ping request can cause reflected javascript code execution, resulting in the execution of javascript code running on the...

CVE-2018-20053

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...

CVE-2018-20053

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...

CVE-2019-2618

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2632

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2582

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability ca...

BSA-2019-783

Security Advisory ID : BSA-2019-783 Component : VPN Revision : 1.0: Final Virtual Private Networks VPNs are used to create a secure connection with another network over the internet. Multiple VPN applications store the authentication and/or session cookies insecurely in memory and/or log files...

GPON Router Remote Command Execution Vulnerability (CNVD-2019-06036)

GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard, with high bandwidth, high efficiency, large coverage, rich user interfaces, and many other advantages, and is regarded by most operators as the...

The vulnerability of JunOS operating system’s network firewall filter, which allows a hacker to gain access to the device

The vulnerability of JunOS’s network firewall filter is related to a malfunction of the policer technology, combined with other technologies. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

GHSA-4Q79-FCH7-G78Q Downloads Resources over HTTP in grunt-webdriver-qunit

Affected versions of grunt-webdriver-qunit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

CVE-2018-19010

CVE-2018-19010 affects Dräger Infinity Delta family (Infinity Delta, Delta XL, Kappa, Infinity Explorer C700 all versions). Root cause: improper input validation (CWE-20) via a malformed network packet that causes the monitor to reboot. Impact: attacker-supplied malformed packets could repeatedly...

CVE-2019-2447

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: Partner Detail. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker wi...

Buffer overflow

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2427

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Discovery protocol in Cisco IOS and Cisco IOS XE operating systems is related to errors in memory management mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted packets...

CVE-2018-19036

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

Bosch IP Cameras (firmware 6.32 and higher) are affected by CVE-2018-19036 due to a buffer overflow in the web server. This could enable remote code execution by a malicious client over the network interface. The CNVD entry and NVD listing corroborate remote arbitrary code execution with high/sev...

Remote Code Execution Vulnerability in Multiple Siemens Products

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A security vulnerability exists in several Siemens products. A remote attacker could exploit this vulnerability by sending specially crafted network packets to port 102/TCP ISO-TSAP to...