The vulnerability of the Switch Configuration Tools Backend component (clcmd_server) of the Cumulus Linux operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Switch Configuration Tools Backend component clcmdserver in the Cumulus Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using metashell shells, utilizing the “cl-rctl”...

derecho24.cl XSS vulnerability

Open Bug Bounty ID: OBB-457022 Description| Value ---|--- Affected Website:| derecho24.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

santillanainfantilyjuvenil.cl XSS vulnerability

Open Bug Bounty ID: OBB-453652 Description| Value ---|--- Affected Website:| santillanainfantilyjuvenil.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

proyecto.webescuela.cl XSS vulnerability

Open Bug Bounty ID: OBB-453320 Description| Value ---|--- Affected Website:| proyecto.webescuela.cl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

seguro.los40.cl Open Redirect vulnerability

Open Bug Bounty ID: OBB-449719 Description| Value ---|--- Affected Website:| seguro.los40.cl Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Cumulus Linux Switch Configuration Tools Backend (clcmd_server) Security Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. Switch Configuration Tools Backend clcmdserver is one of the backend gateway configuration tools. A security vulnerability exists in Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier...

code49.cl XSS vulnerability

Vulnerable URL: https://www.code49.cl/paginas-web-inmobiliarias-en-chile.php?page=1%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

13.cl XSS vulnerability

Open Bug Bounty ID: OBB-254000 Description| Value ---|--- Affected Website:| 13.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the Linux operating system’s DRM driver allows a violator to trigger a service failure or exert other effects.

The vulnerability of the vc4getbcl function in the VideoCore DRM driver for the Linux operating system is due to a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure or other adverse effects through a specially crafted call to...

Linux Kernel Integer Overflow Vulnerability (CNVD-2017-01299)

The Linux Kernel is the kernel of the Linux operating system. A security vulnerability exists in the drivers/gpu/drm/vc4/vc4gem.c/vc4getbcl function in the VideoCore DRM driver in versions of Linux kernel prior to 4.9.7. A local user can cause a denial of service by calling the internally...

DEBIAN-CVE-2017-5576

Integer overflow in the vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4SUBMITCL ioctl call...

PT-2017-2021 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.7 Description: The issue is caused by an integer overflow in the vc4 get bcl function of the VideoCore DRM driver. This can be exploited by a local attacker using a specially crafted VC4 SUBMIT CL ioctl call...

Itaú CL - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Itaú CL published at the 'play' market has multiple vulnerabilities...

motoaventura-cl.motoaventurachile.cl XSS vulnerability

Vulnerable URL: http://motoaventura-cl.motoaventurachile.cl/index.php?lang=de" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

code49.cl XSS vulnerability

Vulnerable URL: http://www.code49.cl/paginas-web-inmobiliarias-en-chile.php?page=1" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Buffer overflow

Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service system crash via a crafted app...

CVE-2016-5231

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...

CVE-2016-5230

The CVE-2016-5230 entry affects Huawei Mate8 devices (NXT-AL, NXT-CL, NXT-DL, NXT-TL variants before specific builds). A crafted app can bypass permission checks and control partial module functions, per the description and multiple connected sources. The Huawei security advisory HWPSIRT-2016-030...

CVE-2016-3680

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service crash or possibly gain privileges via a crafted application, aka...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox / mozilla-nss (SUSE-SU-2014:1510-1)

update to Firefox 31.2.0 ESR bnc900941 - MFSA 2014-74/CVE-2014-1574/CVE-2014-1575 bmo1001994, bmo1011354, bmo1018916, bmo1020034, bmo1023035, bmo1032208, bmo1033020, bmo1034230, bmo1061214, bmo1061600, bmo1064346, bmo1072044, bmo1072174 Miscellaneous memory safety hazards rv:33.0/rv:31.2 - MFSA...