PT-2020-2446 · Unknown · Control Center Server

Name of the Vulnerable Software and Affected Versions: Control Center Server CCS versions prior to V1.5.0 Description: A stored Cross-site Scripting XSS vulnerability has been identified in the web interface of the Control Center Server CCS. This issue is related to the lack of input data...

envoy: Response flooding for HTTP/1.1

A resource consumption vulnerability was found in the servicemesh-proxy in Envoy. An attacker could use pipelined requests to cause excessive amounts of memory to be used, possibly degrading or crashing the application...

The vulnerability of the NTLMv1 authentication component in Samba network communication tools allows a hacker to gain unauthorized access to confidential data.

The vulnerability of the NTLMv1 authentication component in Samba network interactions is related to incomplete protection of user registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

Open Network Operating System (ONOS) Code Unexpected Execution Vulnerability (CNVD-2020-14217)

Open Network Operating System ONOS is a carrier-grade SDN network operating system for service providers and enterprise backbones. A code unintended execution vulnerability exists in Open Network Operating System ONOS 1.14. The vulnerability stems from a host event listener in the access control...

Dream cms v1.4 (lmxcms) background exists arbitrary file deletion vulnerability

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name, completely free and open source. Dream cms v1.4 lmxcms background arbitrary file deletion vulnerability, attackers can exploit the vulnerability of arbitrar...

PT-2020-7493 · Red Hat · Red Hat Openshift

Name of the Vulnerable Software and Affected Versions: Red Hat Openshift version 1 Description: The issue is related to weak default permissions applied to the /etc/openshift/server priv.pem file on the broker server. This could allow users with local access to the broker to read this file...

CVE-2020-6964

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...

CVE-2020-5509

PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...

Dairy Farm Shop Management System SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A SQL injection vulnerability exists in Dairy Farm Shop Management System version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. ...

Static HTTP Server Buffer Overflow Vulnerability

Static HTTP Server is a static HTTP server. A buffer overflow vulnerability exists in Static HTTP Server version 1.0. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Open TFTP Server SP Buffer Overflow Vulnerability

Open TFTP Server SP is a file transfer server. A buffer overflow vulnerability exists in TFTP Server SP version 1.66 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

Open TFTP Server SP Formatting String Error Vulnerability

Open TFTP Server SP is a file transfer server. A formatting string error vulnerability exists in the 'logMess' function in TFTP Server SP version 1.66 and earlier. The vulnerability originates from a network system or product that receives external formatted strings as parameters with lax filteri...

Open TFTP Server Formatting String Error Vulnerability

Open TFTP Server MT is a file transfer server. A formatting string error vulnerability exists in the 'logMess' function in Open TFTP Server MT version 1.65 and earlier. The vulnerability stems from a network system or product that receives external formatted strings as parameters with lax filteri...

CVE-2019-19787

ATasm 1.06 has a stack-based buffer overflow in the getsignedexpression function in setparse.c via a crafted .m65 file...

jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

VMware Harbor Container Registry for Pivotal Platform SQL Injection Vulnerability

VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A SQL injection vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a database-based application that lacks...

Unspecified vulnerability in Qpid C++

Qpid C++ is a message-oriented middleware message broker program written in C++ by the Apache Software Foundation. A security vulnerability exists in Qpid C++ version 1.0. An attacker could exploit this vulnerability to cause the program to crash...

libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check

A vulnerability was found in the Libreswan Project. It was discovered that libreswan, strongswan, and openswan did not verify the integrity check value for received IKEv1 Informational Exchange packets...

UBUNTU-CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

PT-2019-7492 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...