1116 matches found
openSUSE: Security Advisory for openssl-1_0_0 (openSUSE-SU-2019:1432-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-6026
Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...
CVE-2019-6026
CVE-2019-6026 affects MOTEX LanScope Cat and LanScope An products. A privilege-escalation flaw exists in LanScope Cat client program (MR), LanScope Cat detection agent (DA), LanScope Cat server monitoring agent (SA/SAE) before specified versions, and LanScope An before specified versions (2.x and...
CVE-2019-6026
Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...
CVE-2019-5111
Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...
Multiple MOTEX products vulnerable to privilege escalation
Overview LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Mitsuaki Mitch Shiraishi of Secureworks Japan and Yoshimasa Obana reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
Unspecified Vulnerability in MOTEX LanScope Cat and LanScope An
OTEX LanScope Cat and LanScope An are both products of MOTEX Japan.LanScope Cat is a suite of asset monitoring and management software.LanScope An is a smart device management tool. A security vulnerability exists in MOTEX LanScope An and LanScope Cat. An attacker can exploit the vulnerability to...
JVN#49068796: Multiple MOTEX products vulnerable to privilege escalation
LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Impact An user who can login to the PC where the vulnerable product is installed may obtain unauthorized privileges and execute arbitrary code. Solution Update the Software Update to the latest versi...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
CVE-2019-13527
CVE-2019-13527 affects Rockwell Automation Arena Simulation Software Cat. 9502-Ax (versions 16.00.00 and earlier). The issue is a parsing flaw where a pointer is used without initialization when processing Arena DOE files, potentially enabling remote code execution. Exploitation typically require...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
PT-2019-14419 · WordPress · Icegram Plugin
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...
openssl security update
1.0.2k-19.0.1 - Bump release for rebuild. 1.0.2k-19 - close the RSA decryption 9 lives of Bleichenbacher cat timing side channel 1649568 1.0.2k-18 - fix CVE-2018-0734 - DSA signature local timing side channel - fix CVE-2019-1559 - 0-byte record padding oracle - close the RSA decryption One & done...
Cat Runner Decorate Home for Android Input Validation Error Vulnerability
Cat Runner Decorate Home for Android is a parkour game based on the Android platform. An input validation error vulnerability exists in the application API of Cat Runner Decorate Home version 2.8.0 for Android, which can be exploited by an attacker to modify the application data and obtain more...
CVE-2019-13097
The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...
CVE-2019-13097
The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...
Code injection
The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...
CVE-2019-13097
The vulnerability CVE-2019-13097 affects Cat Runner Decorate Home for Android (version 2.8.0). The app’s API does not sufficiently verify inputs that are treated as immutable but can be controlled externally, allowing manipulation of users’ score parameters exchanged between client and server. No...
CVE-2019-13097
The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...