CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

PT-2015-6644

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 2.06+ Build 150618 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the sid parameter in the application/controllers/admin/questiongroups.php...

Cisco Wireless LAN Controller Web Administration Interface Authenticated Remote Denial of Service Vulnerability

A vulnerability in the web administration interface of Cisco Wireless LAN Controllers WLC could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of certain parameters submitted as part of form...

CVE-2015-0984

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/O, XL1000C1000 600 I/O, XL1000C50U 52 I/O UUKL, XL1000C100U 104 I/O UUKL, XL1000C500U 300 I/O UUKL, and XL1000C1000U 600 I/O UUKL controllers before 2.04.01 allows...

CVE-2015-0984

CVE-2015-0984 affects Honeywell XL Web Controller (multiple XL1000C/X LXL lines) where the FTP server flaw enables directory traversal to read web-root files, potentially granting administrative login access. The ICS-CERT advisory ICSA-15-076-02 confirms remote exploitation via path traversal and...

CVE-2015-0984

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/O, XL1000C1000 600 I/O, XL1000C50U 52 I/O UUKL, XL1000C100U 104 I/O UUKL, XL1000C500U 300 I/O UUKL, and XL1000C1000U 600 I/O UUKL controllers before 2.04.01 allows...

CVE-2015-0984: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/O, XL1000C1000 600 I/O, XL1000C50U 52 I/O UUKL, XL1000C100U 104 I/O UUKL, XL1000C500U 300 I/O UUKL, and XL1000C1000U 600 I/O UUKL controllers before 2.04.01 allows...

Multiple Siemens SPC Controller Product Denial of Service Vulnerabilities

Siemens SPC controllers are Siemens controller devices. A security vulnerability in the Siemens SPC controllers SPC4000, SPC5000, and SPC6000 allows attackers to exploit the vulnerability to submit messages for denial of service attacks...

Code injection

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...

CVE-2014-9369

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...

CVE-2014-9369

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...

CVE-2014-9369

CVE-2014-9369 – Affected products and impact : Siemens SPC Controllers SPC4000, SPC5000, and SPC6000 (all versions before 3.6.0) can be forced into a denial-of-service state by specially crafted packets sent to the web interface, causing the device to restart. The vulnerability is categorized as ...

CVE-2014-9369: Improper Input Validation

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...

PT-2015-4189

Name of the Vulnerable Software and Affected Versions Siemens SPC controllers SPC4000, SPC5000, and SPC6000 versions prior to 3.6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, via crafted packets. Recommendations For versions prior to...

libtta 'encoder::process_stream()' heap buffer overflow vulnerability

libtta is the library in linux that supports ATA host controllers. A heap-based buffer overflow exists in the libtta 'encoder::processstream' function, allowing an attacker to exploit the vulnerability to crash the application...

libtta 'console/tta.cpp' divide-by-zero denial-of-service vulnerability

libtta is the library in linux that supports ATA host controllers. The Libtta 'console/tta.cpp' function has a divide-by-zero error that allows an attacker to exploit a vulnerability to crash the application...

Siemens ICS Switches Hit With Buffer Overflow, Authentication Bugs

There are a number of serious vulnerabilities in the Siemens Ruggedcom WIN switches, including a remotely exploitable buffer overflow and a flaw that could allow an attacker to take actions on the device without authentication. The vulnerabilities affect several models of the Ruggedcom WIN...

USN-2481-1 samba vulnerability

Andrew Bartlett discovered that Samba incorrectly handled delegation of authority when being used as an Active Directory Domain Controller. An attacker given delegation privileges could use this issue to escalate their privileges further...

PHPB2B某处sql注入#3

简要描述： PHPB2B某处sql注入3 详细说明： PHPB2B某处sql注入 官网最新版本 libraries/core/controllers/productcontroller.php 176-187行 function lists global $pos, $viewhelper; $viewhelper-setPositionL"productcenter", 'tpl', 'index.php?do=product'; $viewhelper-setTitleL"productcenter", 'tpl'; setvar"module", "product";...

CVE-2010-5314: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in controllers/homecontroller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index...