CVE-2017-1000194

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server...

CVE-2017-1000194

The CVE-2017-1000194 entry concerns October CMS, specifically build 412. The vulnerability enables modification of Apache configuration through the file upload feature, which can lead to site compromise and potentially affect other applications on the same server. The description across connected...

CVE-2017-1000194: Unrestricted Upload of File with Dangerous Type

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server...

CVE-2017-6157

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an...

CVE-2017-6157: Undefined Security Weakness

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an...

PT-2017-16917

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 11.5.0 through 11.5.4 F5 BIG-IP software versions 11.6.0 through 11.6.1 F5 BIG-IP software versions 12.0.0 through 12.1.1 Description The issue affects F5 BIG-IP systems with virtual servers configured using the HTT...

Network Time Protocol Control Mode Unauthenticated Trap Information Disclosure and DDoS Amplification Vulnerability(CVE-2016-9310)

Summary An exploitable configuration modification vulnerability exists in the control mode mode 6 functionality of ntpd. A specially crafted control mode packet can set ntpd traps, providing information disclosure and DDoS amplification, and unset ntpd traps, preventing legitimate monitoring. A...

Security Bypass Vulnerability in Multiple Huawei Phones

Huawei Berlin-L21, L21HN, L22, L22HN, L23, L24HN and FRD-L02, L04, L09, L14 and L19 are smartphones from Huawei. A security bypass vulnerability exists in multiple Huawei phones, where an attacker can modify the phone's configuration, which can lead to a bypass of the FRP feature...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

CVE-2017-7420

An Authentication Bypass CWE-287 vulnerability in ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter...

Default configuration

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

CVE-2017-6785

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

PT-2017-17319

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 10.52.10000.5 through 11.51.10000.6 Description A vulnerability in configuration modification permissions validation could allow an authenticated, remote attacker to perform a horizontal privilege...

CVE-2017-6785: Improper Input Validation

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

Cisco Unified Communications Manager Horizontal Privilege Escalation Vulnerability

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

PT-2017-17993

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3110-HSPA versions 1.3 build 15082117 and previous versions Moxa OnCell G3110-HSDPA versions 1.2 Build 09123015 and previous versions Moxa OnCell G3150-HSDPA versions 1.4 Build 11051315 and previous versions Moxa OnCell 5104-HSDPA...

CVE-2017-7917: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell...

Authentication flaw

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2017-7877

CVE-2017-7877 affects flatCore 1.4.6 and is a CSRF vulnerability that allows remote attackers to modify CMS configurations. Public descriptions across NVD/CNVD/OSV lists confirm CSRF as the issue; CVSS v3.0 base score 8.8 (HIGH) with network attack, low attack complexity, no authentication, and u...