UBUNTU-CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

ALPINE-CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

The vulnerability of the NVBUBackup request handler’s software for data archiving and restoration by NetVault Backup allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NVBUJobCountHistory Get request handler in the NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUJobCountHistory Get request handler in the NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NVBUPhaseStatus GetPlugins request handler in NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUPhaseStatus GetPlugins handler in NetVault Backup software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Wireshark CQL Parser Infinite Loop Vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.CQL dissector is one of the CQL query language parsers. A security vulnerability exists i...

The vulnerability of the NVBUPhaseStatus Count request handler in the NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUPhaseStatus Count processing component in NetVault Backup software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the NVBUPhaseStatus Acknowledge request handler in the software for NetVault Backup’s data archiving and restoration capabilities allows a attacker to execute arbitrary code.

The vulnerability of the NVBUPhaseStatus Acknowledge request handler in software for NetVault Backup’s data archiving and restoration functions is related to insufficient protection of the SQL query structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CwCms v1.8_asp Exists SQL Injection Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8asp suffers from a SQL injection vulnerability. The vulnerability stems from the program does not strictly filter parameters. An attacker can exploit this vulnerability to obta...

CVE-2018-8820

An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xpcmdshell. In some cases, the...

Unisys ClearPath MCP OS and ClearPath OS 2200 ePortal Manager SQL Injection Vulnerability

Unisys ClearPath MCP OS and ClearPath OS 2200 are both dedicated operating systems for ClearPath servers from Unisys Corporation of the United States. ePortal Manager is one of the enterprise portal managers. An SQL injection vulnerability exists in the management interface of ePortal Manager on...

The vulnerability of the NVBUBackup ClientList request processor in the NetVault Backup software for data archiving and restoration allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup ClientList request processor in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NVBUBackup TimeRange request handler in the NetVault Backup software for data archiving and restoration allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup TimeRange request handler in the NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the HPE Network Automation system allows a attacker to bypass authentication procedures and gain increased privileges.

The vulnerability of the HPE Network Automation system management system is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain increased privileges...

The vulnerability of the NVBUBackup Count request handler in the NetVault Backup software for data archiving and restoration allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup Count request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the NVBUJobDefinition Get request handler in the NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUJobDefinition Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

The vulnerability of the NVBUBackupSegment Get request handler in the NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUBackupSegment Get request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the NVBUScheduleSet request handler in the software for data archiving and restoration by NetVault Backup allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUScheduleSet request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NVBUBackupOptionSet Get request handler in the NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUBackupOptionSet Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the NVBUBackup PluginList request handler in the NetVault Backup software for data archiving and restoration allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup PluginList request processor in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...