LG Network Storage N1A1DD1 imgcopy.php has a remote command execution vulnerability

The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 imgcopy.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...

Oracle Fusion Middleware Unspecified Vulnerability in Fusion Middleware MapViewer Component

Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other functionality. analysis development toolkit. An unspecified vulnerability exists in the Oracle Fusion Middleware Fusion Middleware...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2579 DESCRIPTION: An unspecifie...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-11554)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A remote code execution vulnerability exists in...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-09231)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium, which stems...

Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability (CNVD-2017-34263)

Foscam C1 Indoor HD Camera is a wireless high-definition IP camera from Foscam, China.DDNS client is one of the dynamic domain name service clients. A buffer overflow vulnerability exists in the DDNS client in the Foscam C1 Indoor HD Camera. When DDNS is turned on, an attacker can exploit this...

The vulnerability of the CDE Calendar component of the Solaris operating system, which allows a hacker to gain control over the operating system

The vulnerability of the CDE Calendar component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain control over the Solaris operating system via TCP...

CVE-2017-3854

A vulnerability in the mesh code of Cisco Wireless LAN Controller WLC software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could...

EMC Network Configuration Manager Authentication Vulnerability

EMC Network Configuration Manager NCM is an intelligent network configuration manager from EMC Corporation that automates model-based network compliance, change and configuration management to quickly perform network change and configuration management tasks. An authentication vulnerability exist...

ASUS RP-AC52 Access Point Cross-Site Request Forgery Vulnerability

The ASUS RP-AC52 Access Point is a wireless access point from ASUS. A cross-site request forgery vulnerability exists in the ASUS RP-AC52 Access Point using firmware version 1.0.1.1s. A remote attacker can exploit this vulnerability to modify settings and take full control of the system...

Multiple Vulnerabilities in Cube Digital Media Neoscreen

The Cube Digital Media Neoscreen is a smart display from the French company Cube Digital Media. A security vulnerability exists in Cube Digital Media Neoscreen version 4.5. An attacker can exploit this vulnerability to execute arbitrary script code in the context of an affected site, steal...

Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03085)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2016-03025)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center to provid...

Drupal User Dashboard Module SQL Injection Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.User Dashboard is one of the dashboard modules. A SQL injection vulnerability exists in the Drupal User Dashboard module in versions 7.x-1.x prior to 7.x-1.4. An attacker could use this...

GE Healthcare Infinia II Trust Management Vulnerability

GE Healthcare Infinia II is a General Electric GE dual detector imaging system for the healthcare industry. A security vulnerability exists in GE Healthcare Infinia II that stems from the program's use of default passwords username: infinia password: infinia, username: acqservice password: bigguy...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Web Security Virtual Appliance WSAv, Email Security Virtual Appliance ESAv, and Content Security Management Virtual Appliance SMAv software. Exploitation of one of these vulnerabilities may allow a remote attacker to take control o...

PreProjects E-Smart Cart SQL Injection Vulnerability

PreProjects E-Smart Cart is an integrated shopping portal, search engine and email-based forum solution from PreProjects Australia. An SQL injection vulnerability exists in the embadmin/login.asp script in PreProjects E-Smart Cart, which arises from the program failing to adequately filter...

CISCO vulnerability allows remote attacker to take control of Windows system

Cisco has fixed a critical vulnerability in Secure Access Control Server for Windows that could allow remote attackers to execute arbitrary commands and take control of the underlying operating system. Cisco Secure ACS is an application that allows companies to centrally manage access to network...

CVE-2012-2341

Cross-site request forgery CSRF vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files...