1928 matches found
BSOD Error: "STOP 0x0000007E CVhdMp.sys with Kaspersky antivirus
When booting from the Network, to run the Imaging Wizard or simply to boot from a vDisk, the following Blue Screen message is displayed: STOP 0x0000007E CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...
SetucoCMS vulnerable to cross-site request forgery
Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains cross-site request forgery vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. and Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...
SetucoCMS vulnerable to session management
Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains session management vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
CVE-2016-4860
Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...
CVE-2016-4860
Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...
SQL Injection Vulnerability in ry_whoisid Parameter of SSF Digital Management One-Stop System for Primary and Secondary Schools ry_list.asp Page
The SSF One-Stop Shop for Digital Management in Primary and Secondary Schools consists of an external website, a blog for teachers and students, and three internal platforms Teachers' Platform, Students' Platform and Parents' Platform. The product has a SQL injection vulnerability, the...
UBUNTU-CVE-2015-3854
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICEPOWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350...
CG-WLBARGL vulnerable to command injection
Overview CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Ohji Kashiwazaki of Global Security Experts Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#76653039: CG-WLBARGL vulnerable to command injection
CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Impact An arbitrary command may be executed by an authenticated attacker. Solution Do not use CG-WLBARGL As of Jun 22nd, 2016, there are no practical solutions to this issue. It is...
MS16-075 and MS16-076: Description of the security update for Windows Netlogon and SMB Server: June 14, 2016
None None...
Siemens S7300/400 PLC has a Privilege Bypass Downtime Vulnerability
The Siemens S7300/400 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A privilege bypass downtime vulnerability exists in the Siemens S7300/400 PLC. An attacker can exploit the vulnerability by sending a specific message to change the PLC from the RUN stat...
DEBIAN-CVE-2016-2548
sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...
MS16-048: Description of the security update for CSRSS: April 12, 2016
None None...
Stop Motion Studio - Base64 encoded String, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Stop Motion Studio published at the 'play' market has multiple vulnerabilities...
Stop-Motion Movie Creator - Apache license, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Stop-Motion Movie Creator published at the 'play' market has multiple vulnerabilities...
PicPac Stop Motion & TimeLapse - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application PicPac Stop Motion & TimeLapse published at the 'play' market has multiple vulnerabilities...
Stop, Breathe & Think - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application Stop, Breathe & Think published at the 'play' market has multiple vulnerabilities...
Smoke Free, stop smoking help - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Smoke Free, stop smoking help published at the 'play' market has multiple vulnerabilities...
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Using the plugin "Stop User Enumeration 1.3.3" is possible bypass it to get the usernames. PoC Blocked: http://www.example.com/?author%00=%001 Passed: http://www.example.com/?bypass=1%00=1...
Fix weblogic JAVA deserialization vulnerability of a variety of methods-vulnerability warning-the black bar safety net
The current oracle is also not in the publicly released weblogic JAVA deserialization vulnerability official patch currently see the repair method is nothing more than two: Use SerialKiller replace the sequence of operation of the ObjectInputStream class; In does not affect the business case, the...