Cross site scripting

A reflected cross-site scripting XSS vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use this vulnerability to trick an IAP administrator into clicking a link which could then take administrative actions on the Instant cluster, or expose the session...

CVE-2018-7083

If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface...

Design/Logic Flaw

If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface...

CVE-2018-7082

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that woul...

Aerotech Ensemble QLAB Motion Module Detection

Binary data 763922.prm...

Aerotech Ensemble QDe Servo Drives Detection

Binary data 763923.prm...

Rockwell Automation High Resolution (16) Analog Input Module 1746-NI16V Analog I/O

Binary data 754026.prm...

Rockwell Automation High Resolution (2) Analog Input, (2) Analog Voltage Output Module 1746-NIO4V Analog I/O

Binary data 754028.prm...

Mitsubishi FX3U-4DA-ADP Analog I/O Module Detection

Binary data 750962.prm...

Rockwell Automation High Resolution (8) Analog Input Module 1746-NI8 Analog I/O

Binary data 754024.prm...

Mitsubishi FX2N-5A Analog I/O Module Detection

Binary data 750951.prm...

Rockwell Automation High Resolution (2) Analog Input, (2) Analog Current Output Module 1746-NIO4I Analog I/O

Binary data 754027.prm...

Omron CJ1W-PH41U Position Controller Detection

Binary data 755981.prm...

Man-in-the-Middle (MitM)

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor emulates a preemption timer for L2 guests when nested =1 virtualization is enabled. This high resolution timerhrtimer runs when a L2 guest is active. After VM exit, the syncvmcs12 timer object is stopped. The...

Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor emulates a preemption timer for L2 guests when nested =1 virtualization is enabled. This high resolution timerhrtimer runs when a L2 guest is active. After VM exit, the syncvmcs12 timer object is stopped. The...

Design/Logic Flaw

Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected...

[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

Starbucks: Reflected XSS on card.starbucks.com.sg/unsubRevert.php via the 'ct' Parameter

gnux discovered a reflected XSS in https://card.starbucks.com.sg/unsubRevert.php due to an unsanitized user-input via the ct parameter. @gnux— thank you for reporting this vulnerability and confirming the resolution...

libTIFF: Denial of service

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description Please review the CVE identifier referenced below for details. Impact Please review the...