151 matches found
PT-2018-15328 · Tp Link · Tp-Link Td-W8961Nd
Name of the Vulnerable Software and Affected Versions: TP-Link TD-W8961ND affected versions not specified Description: The issue allows for cross-site scripting XSS attacks via the hostname of a DHCP client. This can be exploited by changing a device's hostname to an XSS payload, which will then ...
PT-2018-4008 · D Link · Dir-860L +2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L versions DIR868LA1 FW112b04 and earlier D-Link DIR-865L versions DIR-865L REVA FIRMWARE PATCH 1.08.B01 and earlier D-Link DIR-860L versions DIR860LA1 FW110b04 and earlier Description: The issue allows remote attackers to read ...
PT-2017-2898 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue is related to the DHCP service in the D-Link DIR-850L router's firmware, specifically with the handling of...
PT-2016-1667 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.343 Adobe Flash Player versions 19.x through 21.x prior to 21.0.0.213 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.616 on Linux Description: The issue is related to an untrusted...
PT-2016-3297 · Gnu +3 · Gnu Tar +3
Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...
PT-2009-4378 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4 through 8 Description: A remote code execution issue exists due to improper handling of table operations, allowing attackers to execute arbitrary code via a crafted HTML document that triggers...
PT-2008-6280 · Os-Prober +1 · Os-Prober +1
Name of the Vulnerable Software and Affected Versions: os-prober version 1.17 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/mounted-map or /tmp/raided-map temporary file. The vendor disputes this issue, stating that the insecure code path...
PT-2007-2481 · Xmms · Phpxmms
Name of the Vulnerable Software and Affected Versions: phpXmms version 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to 1 "phpxmmsb.php" or 2 "phpxmmst.php". However, a reliable third party has disputed this, stating that the tcm...
PT-2007-2305 · Unknown · Trevorchan
Name of the Vulnerable Software and Affected Versions: Trevorchan versions 0.7 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary code via the tc configrootdir parameter to several API endpoints, including "upgrade.php", "paint save.php", "menu.php...
PT-2006-4252 · Phpsysinfo · Phpsysinfo
Name of the Vulnerable Software and Affected Versions: phpSysInfo versions 2.5.1 through 3.2.4 Description: The issue allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter. This will display a different...
PT-2002-2814 · Hellbent · Hellbent
Name of the Vulnerable Software and Affected Versions: hellbent version 01 Description: The issue allows remote attackers to determine the full path of the web root directory. This is achieved by sending a GET request with a relative path that includes the root's parent. If the parent is incorrec...