1053 matches found
Exploit for Cross-site Scripting in Peel Peel_Shopping
PoC exploit for CVE-YYYY-NNNN, a Stored XSS vulnerability in PEE...
STVS ProVision 5.9.10 Authenticated Reflected Cross-Site Scripting
Summary STVS is a Swiss company specializing in development of software for digital video recording for surveillance cameras as well as the establishment of powerful and user-friendly IP video surveillance networks. Description Input passed to the POST parameter 'files' is not properly sanitised...
CVE-2021-0203
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
CVE-2021-0203
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
Design/Logic Flaw
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
CVE-2021-0203
The CVE-2021-0203 entry concerns Juniper Junos OS on EX Series and QFX5K Series where a Storm Control profile on the Redundant Trunk Group interface may not activate when the threshold is reached. Affected: EX Series and QFX5K Series; not affecting EX2200, EX3300, EX4200, or EX9200. Vulnerable so...
CVE-2021-0203 Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
Juniper Networks Junos OS EX and Junos OS QFX Security Vulnerabilities
Juniper Networks Junos OS EX and Juniper Networks Junos OS QFX are both switches from Juniper Networks, Inc. A security vulnerability exists in Junos OS EX and Junos OS QFX5K, which can be exploited by an attacker to trigger a denial of service by triggering a fatal error via storm control bypass...
CVE-2020-29580
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...
CVE-2020-29580
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...
Default credentials
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...
CVE-2020-29580
The CVE-2020-29580 entry concerns the Storm Docker images prior to version 1.2.1 that ship with a blank root password. The vulnerability enables a remote attacker to gain root access within affected Storm Docker containers. The Red Hat entry (RH:CVE-2020-29580) and NVD description corroborate the...
CVE-2020-29580
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...
storm Docker Security Vulnerabilities
Apache Storm is an open source distributed real-time computing system developed in Clojure concurrent programming language by the Apache Foundation. A security vulnerability exists in Storm Docker Image versions prior to 1.2.1 that stems from the official image containing a blank password for the...
$100M Botnet Scheme Lands Cybercriminal 8 Years in Jail
Authorities have sentenced a hacker to eight years in prison for trafficking stolen personally identifiable information PII and online banking credentials resulting in losses totaling over $100 million. Aleksandr Brovko, 36, formerly of the Czech Republic, pleaded guilty in February to conspiracy...
Netatalk < 3.1.12 Arbitrary Code Execution Vulnerability - Version Check
Netatalk is prone to an unauthenticated code execution vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SpinetiX Fusion Digital Signage 3.4.8 File Backup/Delete Path Traversal
Summary At SpinetiX we inspire businesses to unlock the potential of their story. We believe in the power of digital signage as a dynamic new storytelling platform to engage with people. For more than 13 years, we have been constantly innovating to deliver cutting-edge digital signage solutions...
B-swiss 3 Digital Signage System 3.6.5 Database Disclosure
Summary Intelligent digital signage made easy. To go beyond the possibilities offered, b-swiss allows you to create the communication solution for your specific needs and your graphic charter. You benefit from our experience and know-how in the realization of your digital signage project...
Security Bulletin: A vulnerabbility exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager (CVE-2019-2949).
Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2, which was disclosed in the Oracle October 2019 Critical Patch Update, but deferred until the release associated with the Oracle April 2020 Critical Patch...
QiHang Media Web (QH.aspx) Digital Signage 3.0.9 Cookie User Password Disclosure
Summary Digital Signage Software. Description The application suffers from a cleartext transmission/storage of sensitive information in a cookie. This allows a remote attacker to intercept the HTTP Cookie authentication credentials via a man-in-the-middle attack. QiHang Media Web QH.aspx Digital...