CVE-2019-1000024

OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting XSS vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result...

CVE-2019-1000023

OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...

Buffer overflow

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

Cross site scripting

OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting XSS vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result...

Sql injection

OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...

CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

CVE-2019-1000023

OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...

CVE-2019-1000006

CVE-2019-1000006 describes a buffer overflow in RIOT-OS’s sock_dns implementation (DNS protocol via RIOT sock API) introduced after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3. The vulnerability can lead to remote code execution and is exploitable over the network. The NVD entry assigns high ...

CVE-2019-1000024

OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting XSS vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result...

CVE-2018-11938

Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

Default configuration

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient...

CVE-2018-19010

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient...

CVE-2018-13374

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the...

Updated libvncserver & x11vnc packages fix security vulnerabilities

A heap use-after-free vulnerability in the server code of the file transfer extension, which can result in remote code execution. This attack appears to be exploitable via network connectivity CVE-2018-6307. A heap use-after-free vulnerability in the server code of the file transfer extension,...

Data Corruption

memcached is vulnerable to data corruption attacks. The vulnerabiltiy exists as memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:itemfree that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This...

At CES, Focus is On ‘Cool Factor’ Not IoT Security

With the Consumer Electronics Show CES afoot this week, headlines are crammed with the offbeat connected products from the show – including everything from a smart belt all the way down to a connected toilet. But one important topic seems to be missing from the troves of CES news and even from th...

The Promise and Peril of 5G

The next generation of mobile cellular technology known as fifth-generation wireless 5G is hitting a peak in the hype cycle, emerging as a major theme/5G.aspx at the Consumer Electronics Show CES this week. Wireless carriers are investing billions of dollars into the technology, which requires a...

From the Core to the Edge: 3 Security Imperatives and the Evolving Digital Topology

The breathtaking pace at which everyone and everything is becoming connected is having a profound effect on digital business, from delivering exceptional experiences, to ensuring the security of your customers, applications, and workforce...

Securing New Devices

During the holidays, internet-connected devices also known as Internet of Things IoT are often popular gifts—such as smart TVs, watches, toys, phones, and tablets. This technology provides a level of convenience to our lives, but it requires that we share more information than ever. The security ...