1709 matches found
RICOH SP 4510SF Printer - HTML Injection
Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Product Version: SP 4510SF Vulernability Type:...
Linux kernel '__feat_register_sp()' function memory leak vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in the 'featregistersp' function in the net/dccp/feat.c file in versions of Linux kernel prior to 5.1. An attacker could exploit thi...
RICOH SP 4510SF Printer - HTML Injection Vulnerability
Exploit for hardware platform in category web applications Exploit Title: RICOH SP 4510SF Printer - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer...
RICOH SP 4510SF Printer - HTML Injection
RICOH SP 4510SF Printer - HTML Injection Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Produ...
RICOH SP 4510SF Printer HTML Injection
Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Product Version: SP 4510SF Vulernability Type:...
Open TFTP Server SP Buffer Overflow Vulnerability
Open TFTP Server SP is a file transfer server. A buffer overflow vulnerability exists in TFTP Server SP version 1.66 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...
SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2019:3386-1)
This update for shibboleth-sp fixes the following issues : Security issue fixed : CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...
CVE-2018-10388
Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet...
CVE-2018-10387
Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161...
CVE-2018-10387
CVE-2018-10387 refers to a heap-based overflow in the TFTP Server SP prior to 1.66. Public sources in the connected records describe a vulnerability where processing a long TFTP error packet can lead to remote denial of service and, potentially, arbitrary code execution. The Open TFTP Server SP 1...
SUSE-SU-2019:3386-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issues: Security issue fixed: - CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471...
CVE-2018-10387: Out-of-bounds Write
Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161...
CVE-2018-10388: Use of Externally-Controlled Format String
Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet...
Null pointer dereference
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference...
CVE-2019-19789: NULL Pointer Dereference
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference...
PT-2019-6356
Name of the Vulnerable Software and Affected Versions CODESYS SP Realtime NT versions prior to V2.3.7.28 CODESYS Runtime Toolkit 32 bit full versions prior to V2.4.7.54 CODESYS PLCWinNT versions prior to V2.4.7.54 Description The issue is related to a NULL pointer dereference in the CODESYS SP...
PT-2019-14480 · Intesync · Intesync Solismed
Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...
Improve cyber supply chain risk management with Microsoft Azure
For years, Microsoft has tracked threat actors exploiting federal cyber supply chain vulnerabilities. Supply chain attacks target software developers, systems integrators, and technology companies. Tactics often include obtaining source code, build processes, or update mechanisms to compromise...
CVE-2019-19191
CVE-2019-19191 affects Shibboleth Service Provider (SP) 3.x before 3.1.0. The vulnerability arises from a spec file that calls chown on files in a directory owned by the shibd service user, enabling local escalation to root via symlinks (e.g., /etc/shadow). Affected advisories indicate the fix is...
CVE-2019-19191: Improper Link Resolution Before File Access
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...