4242 matches found
CVE-2018-1000063
CVE-2018-1000063 is a reservation duplicate of CVE-2018-5379 for the Quagga BGP daemon (bgpd). CVE-2018-5379: bgpd before 1.2.3 can double‑free memory when processing UPDATE messages containing cluster-list and/or unknown attributes, potentially enabling a denial of service and, in some cases, ar...
CVE-2017-15349
Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...
CVE-2017-15349: Missing Release of Resource after Effective Lifetime
Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...
Netis WF2419 Cross-Site Request Forgery Vulnerability
Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site request forgery vulnerability exists in the Netis WF2419 version 2.2.36123. A remote attacker can exploit this vulnerability to delete the settings of Address Reservation List...
CVE-2018-6391
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...
CVE-2018-6391
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...
Cross site request forgery (csrf)
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...
CVE-2018-6391
Netis WF2419 router (firmware 2.2.36123) has a cross-site request forgery vulnerability allowing remote attackers to delete Address Reservation List settings. Root cause: CSRF. Impact is the modification/destruction of router configuration. Exploitation details are not provided in the documents; ...
PT-2018-17526
Name of the Vulnerable Software and Affected Versions Netis WF2419 version 2.2.36123 Description A cross-site request forgery issue allows a remote attacker to delete Address Reservation List settings. Recommendations For Netis WF2419 version 2.2.36123, consider restricting access to the device's...
CVE-2018-6391: Cross-Site Request Forgery (CSRF)
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...
Netis-WF2419 Cross Site Request Forgery
Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...
Netis WF2419 Router - Cross-Site Request Forgery
Netis WF2419 Router - Cross-Site Request Forgery Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123...
Netis WF2419 Router - Cross-Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on:...
Fedora 27 : 2:qemu (2017-8db9c497f9)
Fix ppc64 KVM failure bz 1501936 - CVE-2017-15038: 9p: information disclosure when reading extended attributes bz 1499111 - CVE-2017-15268: potential memory exhaustion via websock connection to VNC bz 1496882 ---- qemu-pr-helper didn't work due to a change in the libmultipath/libmpathpersist APIs...
CVE-2017-1000500
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Joomla JHotelReservation 6.0.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL:...
Joomla JMultipleHotelReservation 6.0.5 SQL Injection
Title: Joomla JMultipleHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomla-hotel-portal URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jmultiplehotelreservation/ Product: 'Joomla...
Joomla JHotelReservation 6.0.5 SQL Injection
Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jhotelreservation/ Product: 'Joomla JHotelReservation 6.0.5'...
CVE-2018-5191
CVE-2018-5191 is a reservation duplicate of CVE-2017-1000479 and not a separate vulnerability entry. CVE-2017-1000479 affects pfSense versions 2.4.1 and lower, exposing a clickjacking vulnerability in the CSRF error page that can lead to privileged code execution because the check occurs before a...
