4662 matches found
CVE-2017-7806
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash. This vulnerability affects Firefox 55...
keystone node module authentication bypass vulnerability
The keystone node module is a set of web application frameworks. A security vulnerability exists in keystone node module versions prior to 0.3.16. The vulnerability can be exploited to bypass authentication by providing the correct password and a partial e-mail address...
CVE-2018-8916
Unverified password change vulnerability in Change Password in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to reset password without verification...
Twonky Server Cross-Site Scripting Vulnerability (CNVD-2018-14438)
LYNX Twonky Server is a media server from LYNX TECHNOLOGY, Inc. that supports the sharing of media content between connected devices. A cross-site scripting vulnerability exists in LYNX Twonky Server versions prior to 8.5.1. A remote attacker can exploit the vulnerability to execute code via fold...
CVE-2018-3758
Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...
bittorrent-dht Remote Memory Disclosure Vulnerability
bittorrent-dht is a Node.js implementation of the BitTorrent DHT protocol. A security vulnerability exists in bittorrent-dht versions prior to 5.1.3. An attacker can exploit the vulnerability to disclose internal memory by sending a specific series of messages...
PT-2018-16143 · Npm · Mixin-Deep
Name of the Vulnerable Software and Affected Versions: mixin-deep versions prior to 1.3.1 Description: The issue allows a malicious user to modify the prototype of Object via proto , causing the addition or modification of an existing property that will exist on all objects. This is achieved...
Delta Industrial Automation DOPSoft Out-of-Bounds Read Vulnerability
Delta Electronics Delta Industrial Automation DOPSoft is a suite of HMI applications from Delta Electronics. An out-of-bounds read vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior versions, which arises from the program failing to properly...
CVE-2018-8923
Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15633)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Storage Group" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'name' parameter...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15617)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the get usage method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15863)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setResetOptions method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'adminemail' and...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15876)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Create Storage Group" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...
Restafary Path Traversal Vulnerability
Restafary is a program for GRUD file manipulation. A path traversal vulnerability exists in Restafary versions prior to 1.6.1, which stems from the fact that restafary can be run at a path other than the specified root path. No details of the vulnerability are provided at this time...
CVE-2018-11192
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...
CVE-2018-11194
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...
CVE-2018-11182
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...
CVE-2018-11194
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...