329 matches found
Intel Matrix Storage Manager Privilege Permission and Access Control Issues Vulnerability
Intel Matrix Storage Manager is a matrix storage manager from Intel USA. The product is able to communicate with Intel I/O controllers, SATA ports. Intel Matrix Storage Manager is vulnerable to privilege permission and access control issues. An attacker could exploit this vulnerability to elevate...
CVE-2018-13822
CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below are affected by CVE-2018-13822 due to unprotected storage of credentials. This allows attackers to access sensitive information. The Connected documents confirm the affected versions and the credential storage issue; no...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by exposure of sensitive information to be cached by browser (CVE-2016-6097)
Summary IBM Security Key Lifecycle Manager allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Attackers with local access or malware installed on the user's...
UQcms_1.3.2_20180309 XSS Vulnerability in Seller Center
B2B2C multi-trader e-commerce system is a combination of many years of e-commerce development experience to launch B2B2C multi-store system, is currently one of the best e-commerce platforms in China, the system is designed as a "platform for self-supporting + suppliers stationed in the" e-commer...
Moxa EDR-810 Plaintext Password Storage Vulnerability(CVE-2017-12127)
Summary An password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device. Tested Versions Moxa EDR-810 V4.1 build 17030317 Product URLs...
Apple iOS and macOS High Sierra Storage Competitive Conditions Vulnerability
Apple iOS and macOS High Sierra are both products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. storage is one of the storage components. A competitive condition vulnerability exists in the Storage compone...
XSS Vulnerability in StartBBS Lightweight Micro Community System at Postings
StartBBS Lightweight Micro Community System is an elegant, open source, lightweight community system based on Thinkphp 5.15 & Layui, with its own article system. StartBBS lightweight micro-community system v2.0.0 version of the posting at the storage-type XSS vulnerability, the attacker can inser...
Microsoft Windows Storage Security Bypass Vulnerability
Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA. storage is one of the components used to manage file storage. A security bypass vulnerability exists in storage in Microsoft Windows that originates from the program failing to validate integrity...
BINOM3 Electric Power Quality Meter Stores Sensitive Information Vulnerability
The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A vulnerability exists in the storage of sensitive information in the BINOM3 Electric Power Quality Meter. An attacker could exploit the vulnerability to gain privileged access to the device...
Red Hat Ceph Storage Denial of Service Vulnerability
Red Hat Ceph Storage is a suite of scalable, open software-defined storage platforms from Red Hat USA. A denial of service vulnerability exists in the 'handlecommand' function in Red Hat Ceph Storage. An attacker can exploit this vulnerability by sending a specially crafted prefix to cause a deni...
Knight Talent System V3.7 Exists Storage-based Cross-site Scripting Vulnerability
Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. The system has a high implementation efficiency, free switching of templates, flexible background management functions and many other excellent features. Knight Talent System V3....
CVE-2015-5313
Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storagebackendfs.c in libvirt, when fine-grained Access Control Lists ACL are in effect, allows local users with storagevol:create ACL but not domain:write permission to write to arbitrary files via ...
CVE-2016-2571
http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a malformed response...
node. js remote memory disclosure vulnerability-vulnerability warning-the black bar safety net
Recently, in allows users to simply send a ping data frame to the allocated memory of the ws module found in the presence of the vulnerability. The vulnerability will reject a user request to send data, allowing users to send a ping data frame function failure, prior to that, it will also increas...
Wordpress < 4.1.2 storage type XSS analysis and stability of the POC-vulnerability warning-the black bar safety net
Wordpress thisXSSis actually very easy to use, anonymous users can post and trigger, this gives a simple analysis of the stability of the trigger of the POC. In fact, the vulnerability of the author in the articlexss-vulnerability-4-1-2/"...
Discuz!3.0-3.2版本的通杀xss存储漏洞（需开始直播功能）
简要描述： 这个必须得高危啊！！！！！！！！！！！ 来个雷劈可好？ 详细说明： 小白不会审计代码 然后咱们就直接进入主题吧！ discuz3.0-3.2有个功能叫直播的。实习版主就能开启哈 接着咱们就用admin帐号先把一个帖子弄成直播！ 接着。我们用新注册的用户。。咳咳。得等两分钟。再能发话哈 然后用等待的时间去进行弄exp 弄成base16的 点击发表 呵呵。弹窗了 漏洞证明： 来。接着 discuz 3.1版本测试...
CVE-2013-6181
EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...
SDCMS somewhere stored xss can hijack administrator-vulnerability warning-the black bar safety net
SDCMS somewhere storage typexss, you can cross into the background directly hijack the administrator The problem or in the short message. Before SDCMS short message exists atxsscan be directly hijack any given user, the Modify bug, but not fix completely, this time to a more ruthless, directly...
Design/Logic Flaw
The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application...