The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services allows a intruder to gain unauthorized access to protected data.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Oracle Performance Management (Performance Management Plan) component of the Oracle E-Business Suite automation system, which allows a perpetrator to modify protected information

The vulnerability of the Oracle Performance Management component Performance Management Plan within the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify protected information using the HTT...

The vulnerability of the Security component of the Oracle Retail Xstore Payment software allows a perpetrator to modify protected information or cause service failures.

The vulnerability of the Security component of the Oracle Retail Xstore Payment software lies in deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify protected information or cause service failures using the HTTP protocol...

The vulnerability of the FTP Server component of the software controller in D-Link Central WiFi Manager allows a hacker to scan network ports and execute a “man-in-the-middle” attack.

The vulnerability of the FTP Server component of the software controller in the D-Link Central WiFi Manager’s centralized wireless network management system is related to incorrect security requirements. Exploiting this vulnerability allows a malicious actor to perform network port scanning and...

How to Load Balance Trivial File Transfer Protocol Servers

This article describes how to load balance a Trivial File Transfer Protocol TFTP server using Reverse Network Address Translation RNAT and Use Source IP USIP. TFTP is simple file transport protocol. It uses User Datagram Protocol UDP port 69 as a transport protocol and is typically implemented on...

The vulnerability of the CORS component of Apache Tomcat servers allows attackers to access protected information.

The vulnerability of the CORS component in Apache Tomcat servers is related to insufficient access control. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected data using the HTTP protocol...

QEMU Directory Traversal Vulnerability

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard.Media Transfer Protocol MTP is one of the... There is a security vulnerability in MTP in QEMU. An attacker could use this vulnerability to navigate the host filesystem in the context of a QEMU process and...

HiLEME suffers from an information leakage vulnerability

HiLEME is a miniature surveillance camera. HiLEME has an information disclosure vulnerability in ftp that can be exploited by attackers to obtain sensitive information...

CVE-2018-16872

A flaw was found in qemu Media Transfer Protocol MTP. The code opening files in usbmtpgetobject and usbmtpgetpartialobject and directories in usbmtpobjectreaddir doesn't consider that the underlying filesystem may have changed since the time lstat2 was called in usbmtpobjectalloc, a classical...

CVE-2018-16872

CVE-2018-16872 describes a TOCTTOU vulnerability in QEMU’s Media Transfer Protocol (MTP) handling. The code paths usb_mtp_get_object, usb_mtp_get_partial_object and usb_mtp_object_readdir don’t account for filesystem changes since the time of lstat(2) in usb_mtp_object_alloc, allowing an attacker...

CVE-2018-16872

A flaw was found in qemu Media Transfer Protocol MTP. The code opening files in usbmtpgetobject and usbmtpgetpartialobject and directories in usbmtpobjectreaddir doesn't consider that the underlying filesystem may have changed since the time lstat2 was called in usbmtpobjectalloc, a classical...

CVE-2018-16872

A flaw was found in qemu Media Transfer Protocol MTP. The code opening files in usbmtpgetobject and usbmtpgetpartialobject and directories in usbmtpobjectreaddir doesn't consider that the underlying filesystem may have changed since the time lstat2 was called in usbmtpobjectalloc, a classical...

UBUNTU-CVE-2018-16872

A flaw was found in qemu Media Transfer Protocol MTP. The code opening files in usbmtpgetobject and usbmtpgetpartialobject and directories in usbmtpobjectreaddir doesn't consider that the underlying filesystem may have changed since the time lstat2 was called in usbmtpobjectalloc, a classical...

DEBIAN-CVE-2018-16867

A flaw was found in qemu Media Transfer Protocol MTP before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lea...

CVE-2018-16867

A flaw was found in qemu Media Transfer Protocol MTP before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lea...

CVE-2018-16867

A flaw was found in qemu Media Transfer Protocol MTP before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lea...

CVE-2018-16867

Technical details for CVE-2018-16867 are not provided in the connected documents. The supplied sources show unrelated advisories; monitor official advisories for concrete affected product, impact, and fixes.

MiniShare Buffer Error Vulnerability (CNVD-2018-25030)

MiniShare is a file sharing system. A buffer overflow vulnerability exists in MiniShare version 1.4.1. An attacker can exploit this vulnerability by sending a long HTTP POST request to execute arbitrary code...

NA300 PLC has information leakage vulnerability

The NA300 PLC is a mid-size programmable controller. An information disclosure vulnerability exists in the NA300 PLC. An attacker can exploit the vulnerability to disclose the PLC ftp service account and password...

ruby: HTTP response splitting in WEBrick

It was found that WEBrick did not sanitize headers sent back to clients, resulting in a response-splitting vulnerability. An attacker, able to control the server's headers, could force WEBrick into injecting additional headers to a client...