340 matches found
nodejs-brace-expansion: Regular expression denial of service
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Netcool Agile Service Manager
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Netcool Agile Service Manager. IBM Netcool Agile Service Manager has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details...
Security Bulletin: Vulnerabilities in Netty affect IBM Netcool Agile Service Manager
Summary Vulnerabilities in Netty used by IBM Netcool Agile Service Manager have been identified. Netcool Agile Service Manager has addressed the CVE. Vulnerability Details CVEID: CVE-2019-9514 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Reset Flood attack. By...
CVE-2019-10937
A vulnerability has been identified in SIMATIC TDC CP51M1 All versions V1.1.7. An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerabili...
ICSA-19-253-05 Siemens SIMATIC TDC CP51M1
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC TDC CP51M1 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could create a denial-of-service condition within UDP...
JS support ticket,1.1.6, SQL Injection
JS support ticket,1.1.6, SQL Injection resolution: update to 1.1.7 update notice: https://joomsky.com/products/js-ticket-joomla.html...
express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison
Versions of express-basic-auth prior to 1.1.7 are vulnerable to Timing Attacks. The package uses native string comparison instead of a constant time string comparison, which may lead to Timing Attacks. Timing Attacks can be used to increase the efficiency of brute-force attacks by removing the...
Synology Router Manager Information Disclosure Vulnerability (CNVD-2019-08961)
Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in the /usr/syno/etc/mount.conf file in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from...
Synology Router Manager Information Disclosure Vulnerability (CNVD-2019-08958)
Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in SYNO.FolderSharing.List in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from errors su...
CVE-2018-13285
Command injection vulnerability in ftpd in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the 1 MKD or 2 RMD command...
CVE-2018-13292
Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...
SQL injection vulnerability in PbootCMS V1.1.7 Do***.php page (CNVD-2018-17754)
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...
SQL injection vulnerability in PbootCMS V1.1.7 Si***.php page (CNVD-2018-17749)
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Si.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...
PbootCMS V1.1.7 SQL Injection Vulnerability in Co***.php Page
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Co.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL injection vulnerability in PbootCMS V1.1.7 Do***.php page (CNVD-2018-17752)
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...
PbootCMS V1.1.7 SQL Injection Vulnerability in Me***.php Page
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Me.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
PbootCMS V1.1.7 SQL Injection Vulnerability in Fo***.php Page
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Fo.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
PbootCMS V1.1.7 SQL Injection Vulnerability in Sl***.php Page
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 SQL injection vulnerability exists in Sl.php page. An attacker can exploit the vulnerability to obtain sensitive information in the database...
PbootCMS V1.1.7 SQL Injection Vulnerability in Li***.php Page
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Li.php page SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
