CVE-2019-5505

The CVE-2019-5505 issue affects NetApp ONTAP Select Deploy admin utility versions 2.2–2.12.1, where credentials are transmitted in plaintext. The combined documents identify the root cause as unencrypted credential handling in the deploy utility, leading to potential credential disclosure. The vu...

CVE-2019-5504

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

CVE-2019-5504

The CVE-2019-5504 entry concerns ONTAP Select Deploy administration utility versions 2.12 and 2.12.1. The vulnerability arises because an HTTP service is bound to the network, allowing unauthenticated remote attackers to perform administrative actions. Documents confirm the affected product (ONTA...

PT-2019-17720

Name of the Vulnerable Software and Affected Versions ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 Description The issue concerns the transmission of credentials in plaintext by the affected software. Recommendations For versions 2.2 through 2.12.1, update to a version...

PT-2019-17719

Name of the Vulnerable Software and Affected Versions ONTAP Select Deploy administration utility versions 2.12 through 2.12.1 Description The issue allows unauthenticated remote attackers to perform administrative actions due to an HTTP service bound to the network. Recommendations For versions...

CVE-2019-5505: Cleartext Transmission of Sensitive Information

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...

CVE-2019-5504: Missing Authentication for Critical Function

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

PT-2019-5545 · Sqlite +9 · Sqlite +9

Name of the Vulnerable Software and Affected Versions: SQLite versions 3.30.1 and earlier Description: The issue is related to errors in handling numbers, which can be exploited by a remote attacker to cause a denial of service. It is also reported that certain SELECT statements with a nonexisten...

Humanica Humatrix 7 Recruitment Module Information Disclosure Vulnerability

Humanica Humatrix 7 is a human resource management solution. recruitment is one of the recruitment modules. A security vulnerability exists in the Recruitment module in Humanica Humatrix 7 versions 1.0.0.681 and 1.0.0.203. A remote attacker can exploit the vulnerability by modifying the 'selApp'...

CVE-2018-20962

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

Design/Logic Flaw

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

CVE-2018-20962

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

CVE-2018-20962

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

PT-2019-10398

Name of the Vulnerable Software and Affected Versions BackpackCRUD Backpack component versions prior to 3.4.9 Description The issue allows for XSS via the select field type. Recommendations For versions prior to 3.4.9, update to version 3.4.9 or later to resolve the issue...

CVE-2018-20962: Improper Neutralization of Input During Web Page Generation

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

DEBIAN-CVE-2016-10764

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...

UBUNTU-CVE-2016-10764

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...

The vulnerability of the BARS.Web-Sudy platform, related to deficiencies in the authentication mechanism, allows a hacker to select user account names.

The vulnerability of the BARS.Web-Sudy platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to select user accounts using specially crafted POST requests...

CVE-2018-19462

admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php...