Cisco SD-WAN vManage Software Input Validation Error Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An input validation error vulnerability exists in Cisco SD-WAN vManage Software, which stems from the program failing to properly validate input. A remote attacker could...

Cisco SD-WAN Solution Resource Management Error Vulnerability

Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A resource management error vulnerability exists in Cisco SD-WAN Solution versions prior to 17.2.7 and prior to 18.3.0. A remote attacker could exploit this vulnerability to cause a denial of service with the help of a...

Multiple Citrix Systems Products Input Validation Error Vulnerabilities

Citrix Systems Citrix Application Delivery Controller ADC and others are products of Citrix Systems USA.Citrix Application Delivery Controller is an application delivery controller. Citrix Systems Gateway Citrix Systems NetScaler Gateway is a secure remote access solution. the Citrix System SDWAN...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-38175)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to write arbitrary files in the SD card area...

Design/Logic Flaw

BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...

CVE-2020-13247

BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...

CVE-2020-13247

BooleBox Secure File Sharing Utility (before 4.2.3.0) is affected by two CVEs in the dataset: CVE-2020-13247 enables CSV injection via a crafted username exported from activity logs in Audit Area; CVE-2020-13248 enables stored XSS via a crafted avatar field in My Account JSON data to Account.aspx...

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

CVE-2020-2033

When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on the same local area network segment with the ability to manipulate ARP or to conduct ARP spoofing...

The vulnerability of the CLI command-line interface of Cisco IOS XE SD-WAN allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the CLI command-line interface of Cisco IOS XE SD-WAN software is related to insufficient validation of entered data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

CVE-2020-13833

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 June 2020...

CVE-2020-6640

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Description Area...

CVE-2020-6640

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Description Area...

CVE-2020-6640

CVE-2020-6640 describes a stored cross-site scripting (XSS) vulnerability in the Fortinet FortiAnalyzer Admin Profile, enabling a remote, authenticated attacker to execute client-side scripts via the Description Area. The issue affects the Admin Profile input handling and arises from improper inp...

Exploit for OS Command Injection in Exim

Exim CVE Data Collection Data Collection Related to Exim Vuln...

XSS vulnerability in the Description Area of the Admin Profile

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Description Area...

nashvilleareainfo.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1181589 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c

A flaw was found in several functions of the IPMItool, where it failed to check data received from a LAN properly. An attacker could use this flaw to craft payloads, which can lead to a buffer overflow and also cause memory corruption, a denial of service, and remote code execution...

ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c

A flaw was found in several functions of the IPMItool, where it failed to check data received from a LAN properly. An attacker could use this flaw to craft payloads, which can lead to a buffer overflow and also cause memory corruption, a denial of service, and remote code execution...