133 matches found
Security feature bypass
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp function. By adding "" to the end of "key" in the URL when accessing API functions...
CVE-2018-1000628: Undefined Security Weakness
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp function. By adding "" to the end of "key" in the URL when accessing API functions...
PT-2018-9481
Name of the Vulnerable Software and Affected Versions Battelle V2I Hub version 2.5.1 Description The issue allows a remote attacker to bypass security restrictions. This is caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's...
PHP study notes and security vulnerabilities-vulnerability warning-the black bar safety net
System variables $POST // get the post data is a dictionary $GET // get get data, is a dictionary The error control operator PHP supports one error control operator:@the. When it is placed in a PHP expression, the expression may produce any error information is ignored. Variable default value Whe...
WS-2016-7082
In Kitware/VTK, version v4.2.5 to v7.1.1 the function “ReadASCIICellTopology” has a Buffer overrun vulnerability, due to the use of “strcmp” in a non secure manner, and insecure memory management using “char” instead of the c++ alternative- “std::strings”, that can result the program to crash or...
Dolphin < 7.3.3 Authentication Bypass Vulnerability
Dolphin is prone to an authentication bypass vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Debian DLA-598-1 : suckless-tools security update
It was discovered that the slock screen locking tool would segfault when the user's account had been disabled. slock called crypt3 and used the return value for strcmp3 without checking to see if the return value of crypt3 was a NULL pointer. If the hash returned by getspnam-sppwdp was invalid,...
X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (solaris/x86)
No description provided by source. / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security [email protected], / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle...
Fedora 20 : nbd-3.5-1.fc20 (2013-22557)
Add systemd support for nbd-server. Use strcmp rather than strncmp for CVE-2013-6410. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 18 : nbd-3.5-1.fc18 (2013-22607)
Add systemd support for nbd-server. Use strcmp rather than strncmp for CVE-2013-6410. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (sco/x86)
No description provided by source. / X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (1)
X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 1 / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licen...
X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow
/ X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either versi...