116 matches found
CVE-2017-6127
Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...
CVE-2017-6127
The CVE-2017-6127 issue affects the DigiSol DG-HR1400 Wireless Router (firmware 1.00.02) and is a CSRF vulnerability in the access portal. Exposed via crafted requests to form2WlanBasicSetup.cgi, it allows an attacker to hijack administrator authentication to perform actions such as changing the ...
dg-lifestyle.com XSS vulnerability
Vulnerable URL: http://www.dg-lifestyle.com/DG2015/mac/macstore/optioncn.php?productTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:47 GMT Vulnerability type:| XSS Vulnerability status:|...
CVE-2014-8496
Digicom DG-5514T ADSL router with firmware 3.2 generates predictable session IDs, which allows remote attackers to gain administrator privileges via a brute force session hijacking attack...
CVE-2014-8496
This CVE affects Digicom DG-5514T ADSL router with firmware 3.2, where predictable session IDs enable remote attackers to gain administrator privileges via a brute-force session hijacking attack. The connected documents confirm the vulnerability and impact but do not provide any remediation or pa...
Data General DG/UX 5.4 inetd Service Exhaustion Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon...
openSUSE Security Update : mozilla-nss (openSUSE-SU-2013:1868-1)
This update fixes the following security issue with mozilla-nss : - update to 3.15.3.1 bnc854367 - includes certstore update 1.95 bmo946351 explicitely distrust AC DG Tresor SSL - adapt specfile to ppc64le %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
Microsoft Digital Certificates Security Advisory (2916652)
This host is missing an important security update according to Microsoft advisory 2916652. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2916652.nasl 5347 2017-02-19 09:15:55Z cfi $ Microsoft Digital Certificates Security Advisory 2916652 Authors: Shashi Kiran N Copyright: Copyright ...
Microsoft Digital Certificates Security Advisory (2916652)
This host is missing an important security update according to Microsoft advisory 2916652. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2010-0560
CVE-2010-0560 : Intel Desktop Boards BIOS contains a local privilege-escalation flaw allowing a user with administrative rights to execute arbitrary code in System Management Mode (SSM). Affected are DB, DG, DH, DP, and DQ series boards. The vulnerability is caused by an unspecified issue in the ...
CVE-2005-2305
CVE-2005-2305 affects DG Remote Control Server 1.6.2. The vulnerability arises from a potential buffer overflow triggered by a long message sent to TCP ports 1071 or 1073, causing a denial of service and possibly allowing arbitrary code execution. The available documents explicitly describe the r...
DG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflow
// source: https://www.securityfocus.com/bid/2509/info DGUX is the Data General revision of UNIX. It is designed as a solution for Intel systems produced by Data General. A problem in the handling of error messages by the printer scheduler could allow arbitrary execution of code. By placing a...
Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service
source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...
CVE-1999-0152
The DG/UX finger daemon allows remote command execution through shell metacharacters...
CVE-1999-0152
The CVE-1999-0152 issue affects the DG/UX finger daemon, where remote command execution is possible via shell metacharacters. Multiple connected sources corroborate that an attacker can trigger arbitrary commands on a target system, potentially gaining a shell. Documented impact is remote executi...