4406 matches found
CVE-2022-2104
The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31100 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31100 Source advisory: OSV:GHSA-8V9W-P43C-R885...
MAL-2022-6685 Malicious code in tvmtool-bin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afafb840dc7f2c41059385ff43ad597118b804261e20aa86ddf5cd607b3c9634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tvmtool-bin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afafb840dc7f2c41059385ff43ad597118b804261e20aa86ddf5cd607b3c9634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Debian DSA-5165-1 : vlc - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5165 advisory. Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is...
CVE-2020-36548
CVE-2020-36548 affects GE Voluson S8, specifically the Service Browser component /uscgi-bin/users.cgi. The root cause is improper/authentication bypass allowing elevated access from a local attacker, with attack described as local and capable of compromising confidentiality, integrity, and availa...
PT-2022-8997
Name of the Vulnerable Software and Affected Versions GE Voluson S8 affected versions not specified Description A vulnerability has been found in the file /uscgi-bin/users.cgi of the Service Browser, leading to improper authentication and elevated access possibilities. The attack can be launched ...
CVE-2020-36548: Improper Authentication
A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host...
CVE-2022-31847: Direct Request
A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request...
CVE-2021-41738: Improper Neutralization of Special Elements used in an OS Command
ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands...
Barco Control Room Cross-Site Scripting Vulnerability
Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...
CVE-2022-26972
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS...
CVE-2022-26972
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS...
CVE-2022-26972: Improper Neutralization of Input During Web Page Generation
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS...
PT-2022-18150
Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application version prior to 3.14 Description The issue is related to the exposure of a URL /cgi-bin endpoint in the web application, where URL parameters are not correctly sanitized. This leads to...
CVE-2021-44974
radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/binsymbols.c binary symbol parser...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31099 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31099 Source advisory: OSV:RUSTSEC-2022-0030...
Buffer overflow in wasm3
WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm...
CVE-2020-29600
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501...