I-O DATA DEVICE WN-G300R3 Hardcoded Credential Vulnerability

The I-O DATA DEVICE WN-G300R3 is a wireless router device from I-O DATA DEVICE Japan. A hard-coded credentials vulnerability exists in the I-O DATA DEVICE WN-G300R3 using firmware version 1.0.2 and earlier, which stems from the program's use of hard-coded credentials. An attacker could exploit th...

Douroshisetu Kihon Data Sakusei System Untrusted Search Path Vulnerability

Douroshisetu Kihon Data Sakusei System is a basic data creation system for road facilities released by the National Institute for Land and Infrastructure Management in Japan. An untrustworthy search path vulnerability exists in Douroshisetu Kihon Data Sakusei System 1.0.2 and earlier versions. An...

Command Injection

Overview Affected versions of fs-git do not sanitize strings passed into the buildCommand method, resulting in arbitrary code execution. Recommendation Update to version 1.0.2 or later. References - Commit eb5f70e - GitHub Advisory...

Libmenu-cache Denial of Service Vulnerability

Libmenu-cache is a library that can create and utilize caches to shorten the loading time of menu items. A denial of service vulnerability exists in Libmenu-cache version 1.0.2. A local attacker can exploit this vulnerability to cause a denial of service menu is unusable...

MetalGenix GeniXCMS 'forgotpassword.php' File Denial of Service Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A security vulnerability exists in the forgotpassword.php file in MetalGenix GeniXCMS version 1.0.2. A...

MetalGenix GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2017-07612)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2. A remote attacker can...

MetalGenix GeniXCMS Cross-Site Scripting Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2, which can be exploited b...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-06841)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Control/Backend/menus.control.php file in MetalGenix...

MetalGenix GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2017-06842)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.0.2. A remote attacker can...

UBUNTU-CVE-2017-7191

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via unspecified vectors...

PT-2017-17567 · Irssi +1 · Irssi +1

Name of the Vulnerable Software and Affected Versions: Irssi versions 1.x before 1.0.2 Description: The issue in Irssi's netjoin processing allows attackers to cause a denial of service and possibly execute arbitrary code. Recommendations: For Irssi versions 1.x before 1.0.2, update to version...

jwt security bypass vulnerability

jwt is an implementation of the JSON Web Token JWT scheme for use in PHP . A security bypass vulnerability exists in the verify function of the Encryption/Symmetric.php file in jwt 1.0.2 and earlier versions. An attacker can exploit this vulnerability to forge a signature...

Easy Youtube Gallery , 1.0.2,Information Disclosure

Easy Youtube Gallery , 1.0.2,Information Disclosure...

metapixel 'rwgif.c' heap buffer overflow vulnerability

metapixel is a program for generating photo mosaics. A heap buffer overflow vulnerability exists in metapixel version 1.0.2, and other versions may also be affected. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected program. Failure to exploit thi...

Cisco IronPort AsyncOS for Cisco Email Security Appliances Privilege Gain Vulnerability

Cisco IronPort AsyncOS for Cisco Email Security Appliances ESA is a set of operating systems for use in ESAs Email Security Appliances from Cisco USA. A privilege acquisition vulnerability exists in Cisco IronPort AsyncOS for Cisco ESA. When versions prior to Enrollment Client 1.0.2-065 are...

Toshiba Coordinate Plus App for Android and iOS Security Bypass Vulnerability

Toshiba Coordinate Plus App for Android and iOS is a suite of virtual assembly applications for Android and iOS from Toshiba, Japan. A security bypass vulnerability exists in Toshiba Coordinate Plus App for Android and iOS versions 1.0.2 and earlier. An attacker could exploit the vulnerability to...

OpenSSL 1.0.2 < 1.0.2f Information Disclosure

Binary data 9465.prm...

PT-2016-5019

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1 through 1.0.1t OpenSSL versions 1.0.2 through 1.0.2h Description The AES-NI implementation in OpenSSL does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive...

OpenSSL DSA Code Double Release Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A double-release vulnerability in OpenSSL versions 1.0.2 and earlier, 1.0.1 and earlier parsing malformed DSA keys allows attackers t...

OpenSSL SRP_VBASE_get_by_user Memory Disclosure Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A memory leak vulnerability in the SRP user database query method, SRPVBASEgetbyuser, in OpenSSL versions 1.0.2 and earlier, and 1.0....