CVE-2019-5987

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page...

CVE-2019-5988: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page...

CVE-2019-5989: Improper Neutralization of Input During Web Page Generation

DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page...

CVE-2019-5987: Improper Neutralization of Special Elements used in an OS Command

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page...

CVE-2019-5990: Insufficiently Protected Credentials

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer...

CVE-2019-6026

Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...

CVE-2019-6026

Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...

CVE-2019-6026

CVE-2019-6026 affects MOTEX LanScope Cat and LanScope An products. A privilege-escalation flaw exists in LanScope Cat client program (MR), LanScope Cat detection agent (DA), LanScope Cat server monitoring agent (SA/SAE) before specified versions, and LanScope An before specified versions (2.x and...

CVE-2019-6026: Undefined Security Weakness

Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...

Multiple MOTEX products vulnerable to privilege escalation

Overview LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Mitsuaki Mitch Shiraishi of Secureworks Japan and Yoshimasa Obana reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Unspecified Vulnerability in MOTEX LanScope Cat and LanScope An

OTEX LanScope Cat and LanScope An are both products of MOTEX Japan.LanScope Cat is a suite of asset monitoring and management software.LanScope An is a smart device management tool. A security vulnerability exists in MOTEX LanScope An and LanScope Cat. An attacker can exploit the vulnerability to...

JVN#49068796: Multiple MOTEX products vulnerable to privilege escalation

LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Impact An user who can login to the PC where the vulnerable product is installed may obtain unauthorized privileges and execute arbitrary code. Solution Update the Software Update to the latest versi...

AN HTTPD Detection

Checks whether AN HTTPD is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU Gener...

Fedora Update for rsyslog FEDORA-2019-1fb95ae48d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fixed in Apache Tomcat 8.5.49

Note: The issue below was fixed in Apache Tomcat 8.0.48 but the release vote for the 8.0.48 release candidate did not pass. Therefore, although users must download 8.0.49 to obtain a version that includes the fix for this issue, version 8.0.48 is not included in the list of affected versions...

CVE-2015-9498: Cross-Site Request Forgery (CSRF)

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...

Xi'an Bailian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be...

SQL Injection Vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is a SQL injection vulnerability in Yinda Hui Zhi Anshu Yi Intelligent Integrated Management...

Information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is an information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated...

CVE-2016-10797: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...