CVE-2018-5529

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

CVE-2018-5529

The CVE-2018-5529 entry concerns the svpn component of the F5 BIG-IP APM client for Linux and macOS, vulnerable prior to version 7.1.7. The issue arises because svpn runs as a privileged process, enabling a local unprivileged user to gain super-user privileges on the local client host, potentiall...

CVE-2018-14014: Cross-Site Request Forgery (CSRF)

In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd...

PT-2018-17023

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7 for Linux and Mac OS X Description The issue allows an unprivileged user to assume super-user privileges on the local client host, potentially gaining access to sensitive information, manipulating...

PT-2018-12278

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue allows for the addition of an admin account via the admin.php?m=Member&a=adminadd API endpoint, due to a CSRF vulnerability. Recommendations For waimai Super Cms version 20150505, as a...

CVE-2018-13516: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Super Cool Awesome Money SCAM, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11897

Name of the Vulnerable Software and Affected Versions Super Cool Awesome Money SCAM affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation. This overflow allows the contract owner to set the balance of any us...

CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13191

The CVE-2018-13191 entry concerns the mintToken function of the Super Carbon Coin (SCC) Ethereum token smart contract. A integer overflow in mintToken allows the contract owner to set an arbitrary user’s balance to any value, effectively corrupting token accounting and granting the owner unauthor...

CVE-2018-13191: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11672

Name of the Vulnerable Software and Affected Versions Super Carbon Coin SCC affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token. This overflow allows the owner ...

Linux kernel denial of service vulnerability (CNVD-2018-12667)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial-of-service vulnerability exists in fs/f2fs/super.c in 4.17.3 and earlier versions of the Linux kernel. An...

Linux kerne 'fs/f2fs/super.c' local denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the fs/f2fs/super.c file in Linux kernel version 4.17.3 and earlier, which stems from a program that fails to properly validate the...

super-hobby.com XSS vulnerability

Open Bug Bounty ID: OBB-635562 Description| Value ---|--- Affected Website:| super-hobby.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

super-plans.com XSS vulnerability

Open Bug Bounty ID: OBB-632950 Description| Value ---|--- Affected Website:| super-plans.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Wide Area Application Services Software Scripts Privilege Escalation Vulnerability

A vulnerability in Cisco-provided scripts disk-check.sh and harcap.sh for Cisco Wide Area Application Services WAAS Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges level 15 to...

CVE-2018-11629

Default and unremovable support credentials user:lutron password:integration allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not...

CVE-2018-11682

Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can...