CVE-2019-5509: Improper Control of Generation of Code

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

IBM WebSphere eXtreme Scale Admin API Cross-Site Scripting Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM in the United States. The product supports dynamic caching, partitioning, replication, and management of application data and business logic across multiple servers.Admin API is one of the management API Application Programmin...

CVE-2013-3072

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http:///apply.cgi?/hddusrsetup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal...

PT-2019-6904

Name of the Vulnerable Software and Affected Versions NETGEAR Centria WNDR4700 Firmware version 1.0.0.34 Description An Authentication Bypass issue exists, allowing any user to access the web administration portal without a password by visiting a specific URL. The affected URL is...

CVE-2013-3072: Improper Authentication

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http:// /apply.cgi?/hddusrsetup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal...

Orcus RAT Author Charged in Malware Scheme

In July 2016, KrebsOnSecurity published a story identifying a Toronto man as the author of the Orcus RAT, a software product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. This week, Canadian authorities criminally charged him with...

Administration Views - Moderately critical - Access bypass - SA-CONTRIB-2019-076

This module replaces administrative overview/listing pages with actual views for superior usability. The module doesn't sufficiently check user access when using the "Menu system path" access handler on a Views displays other than "System". Update: This project had been unsupported due to this...

CVE-2019-17327

JEUS 7 Fix05 and JEUS 8Fix01 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file...

CVE-2019-17327

JEUS 7 Fix05 and JEUS 8Fix01 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file...

PT-2019-15090

Name of the Vulnerable Software and Affected Versions JEUS versions 7.0 through 7.5 JEUS versions 8.0 through 8.1 Description The issue is caused by an improper input parameter check when uploading an installation file in the administration web page, leading to a directory traversal vulnerability...

CVE-2019-17327: Improper Limitation of a Pathname to a Restricted Directory

JEUS 7 Fix05 and JEUS 8Fix01 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file...

Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM License Key Server Administration and Reporting Tool and Agent

Summary There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM License Key Server Administration and Reporting Tool ART and Agent. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

PT-2019-15562

Name of the Vulnerable Software and Affected Versions Fastweb FASTGate version 1.0.1b Description The issue allows for partial authentication bypass by modifying a certain check pwd return value from 0 to 1. Although an attack does not grant administrative control of a device, it enables the...

CVE-2019-18661: Improper Authentication

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...