2012 matches found
CVE-2018-8754
The libevtrecordvaluesreadevent function in libevtrecordvalues.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub...
CVE-2018-8754
The libevtrecordvaluesreadevent function in libevtrecordvalues.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub...
CVE-2018-8754: Out-of-bounds Read
The libevtrecordvaluesreadevent function in libevtrecordvalues.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub...
Sophos UTM 9.410 - (loginuser) (confd) Service Privilege Escalation Vulnerability
Exploit for linux platform in category local exploits Title: Sophos UTM 9 loginuser Privilege Escalation via confd Service Publication Date: 2018.03.02 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2018-007.txt 1. Vulnerability Details Affected Vendor: Sophos Affected...
Sophos UTM 9.410 - loginuser confd Service Privilege Escalation
Sophos UTM 9.410 - loginuser confd Service Privilege Escalation KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service Title: Sophos UTM 9 loginuser Privilege Escalation via confd Service Advisory ID: KL-001-2018-007 Publication Date: 2018.03.02 Publication URL:...
Sophos UTM 9.410 - 'loginuser' 'confd' Service Privilege Escalation
KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service Title: Sophos UTM 9 loginuser Privilege Escalation via confd Service Advisory ID: KL-001-2018-007 Publication Date: 2018.03.02 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2018-007.txt 1...
Sophos UTM 9 loginuser Privilege Escalation via confd Service
Vulnerability Details Affected Vendor: Sophos Affected Product: UTM 9 Affected Version: 9.410 Platform: Embedded Linux CWE Classification: CWE-306: Missing Authentication for Critical Function SID generation Impact: Privilege Escalation Attack vector: SSH 2. Vulnerability Description The...
Windows: Constrained Impersonation Capability EoP(CVE-2018-0821)
Windows: Constrained Impersonation Capability EoP Platform: Windows 10 1703/1709 not tested earlier versions Class: Elevation of Privilege Summary: It’s possible to use the constrained impersonation capability added in Windows 10 to impersonate a lowbox SYSTEM token leading to EoP. Description:...
CVE-2018-5983: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request...
PT-2018-17269
Name of the Vulnerable Software and Affected Versions: Joomla! JquickContact version 1.3.2.2.1 Description: A SQL Injection issue exists in the JquickContact component for Joomla!. The issue can be exploited via a task=refresh&sid= request. Recommendations: For JquickContact version 1.3.2.2.1,...
CVE-2018-6575
SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request...
PT-2018-17639
Name of the Vulnerable Software and Affected Versions JEXTN Classified version 1.0.0 Description A SQL Injection issue exists in the JEXTN Classified component for Joomla!. This issue can be exploited via a request to the "view=boutique&sid=" endpoint. Recommendations For JEXTN Classified version...
CVE-2018-6575: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request...
Microsoft Windows - NtImpersonateAnonymousToken LPAC to Non-LPAC Privilege Escalation
Microsoft Windows - NtImpersonateAnonymousToken LPAC to Non-LPAC Privilege Escalation Windows: NtImpersonateAnonymousToken LPAC to Non-LPAC EoP Platform: Windows 10 1703 and 1709 not tested Windows 8.x Class: Elevation of Privilege Summary: When impersonating the anonymous token in an LPAC the...
Updated libextractor packages fix security vulnerability
GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...
PT-2017-15135
Name of the Vulnerable Software and Affected Versions BA SYSTEMS BAS Web versions on BAS920 devices with Firmware 01.01.00, HTTPserv 00002, and Script 02. BA SYSTEMS BAS Web versions on ISC2000 devices Description The issue allows remote attackers to obtain sensitive information by making a reque...
PHP Scripts Mall Secure E-commerce Script SQL Injection Vulnerability
PHP Scripts Mall Secure E-commerce Script is a set of PHP based e-commerce website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Secure E-commerce Script version 2.0.1. A remote attacker can inject SQL into the category.php file by sending the...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability
PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...
