CVE-2018-3758

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

bittorrent-dht Remote Memory Disclosure Vulnerability

bittorrent-dht is a Node.js implementation of the BitTorrent DHT protocol. A security vulnerability exists in bittorrent-dht versions prior to 5.1.3. An attacker can exploit the vulnerability to disclose internal memory by sending a specific series of messages...

PT-2018-16143 · Npm · Mixin-Deep

Name of the Vulnerable Software and Affected Versions: mixin-deep versions prior to 1.3.1 Description: The issue allows a malicious user to modify the prototype of Object via proto , causing the addition or modification of an existing property that will exist on all objects. This is achieved...

Delta Industrial Automation DOPSoft Out-of-Bounds Read Vulnerability

Delta Electronics Delta Industrial Automation DOPSoft is a suite of HMI applications from Delta Electronics. An out-of-bounds read vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior versions, which arises from the program failing to properly...

CVE-2018-8923

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15876)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Create Storage Group" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15633)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Storage Group" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'name' parameter...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15863)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setResetOptions method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'adminemail' and...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15617)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the get usage method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Restafary Path Traversal Vulnerability

Restafary is a program for GRUD file manipulation. A path traversal vulnerability exists in Restafary versions prior to 1.6.1, which stems from the fact that restafary can be run at a path other than the specified root path. No details of the vulnerability are provided at this time...

CVE-2018-11185

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...

CVE-2018-11192

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...

CVE-2018-11194

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11194

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...

CVE-2018-11171

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 29 of 46...

CVE-2018-11161

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...

CVE-2018-11172

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...

Command injection

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...

PT-2018-15490 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL crate versions prior to 0.10.9 Description: A use-after-free issue occurs in CMS Signing, where structures are used after they have been freed. Recommendations: For versions prior to 0.10.9, update to version 0.10.9 or later to resolv...