GHSA-67J6-XV27-W6WW Web Console (Ruby gem) contains whitelisted_ips bypass

request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelistedips protection mechanism via a crafted request...

actionpack Path Traversal vulnerability

Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files...

Unsafe Query Generation Risk in Ruby on Rails

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

Technicolor TD5336 Router Remote Code Execution (CVE-2017-14127)

A remote code execution vulnerability is exist in Technicolor router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Microsoft Windows SMB Server SMBv1 Out of Bounds Read (CVE-2017-11781)

An out of bounds read vulnerability exists in the SMB Server component of Microsoft Windows. The vulnerability is due to improper handling of SMBv1 requests. A remote, authenticated attacker could exploit the vulnerability by sending a crafted SMBv1 request to a target SMB server...

Vacron NVR Remote Code Execution

A remote code execution vulnerability is exist in Vacron devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link DIR-600/300 Router Unauthenticated Remote Command Execution

A remote code execution vulnerability exists in D-Link DIR-600, DIR-300 routers. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Linksys Devices Multiple Vulnerabilities

Multiple Linksys devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:linksys:";...

D-Link DIR800 Series Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link DIR800 series router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link 850L Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link 850l router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability

OrientDB does not enforce privilege requirements during SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orientdb:orientdb";...

CVE-2017-15236

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config files and extendword.txt...

CVE-2017-15236

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config files and extendword.txt...

Microsoft Windows Shell Memory Corruption Vulnerability

Microsoft Windows is a popular operating system. A memory corruption vulnerability exists in the Microsoft Windows Shell, which allows remote attackers to exploit the vulnerability by submitting a specific request that can be used in the context of an application to execute arbitrary code or cras...

IBM Security Identity Manager Virtual Appliance Arbitrary Command Execution Vulnerability (CNVD-2017-33517)

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

Microsoft Windows SMB Out-Of-Bounds Read Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service on vulnerable installations of Microsoft Windows. Authentication is required to exploit this vulnerability, assuming the product is in its default configuration. The specific flaw exists within the srv driver. A crafted...

ZTE Microwave NR8000 Series Product Remote Code Execution Vulnerability

ZTE Microwave NR8120 and others are microwave transmission solutions from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE Microwave NR8000 series products. A remote attacker can exploit the vulnerability by sending a specially crafted RMI request to execute arbitrary code ...

Google Android Huawei bootloader elevation of privilege vulnerability

Android is a free and open-source Linux-based operating system for mobile devices such as smartphones and tablets, led and developed by Google Inc. and the Open Handset Alliance. A security vulnerability exists in the Android Huawei bootloader that allows an attacker to exploit the vulnerability ...

OpenVPN 'read_key()' function buffer overflow vulnerability

OpenVPN is an open source VPN program. A buffer overflow vulnerability exists in the OpenVPN 'readkey' function, which allows remote attackers to exploit the vulnerability by submitting a special request that could crash the application or execute arbitrary code...