281 matches found
DEBIAN-CVE-2016-10907
An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755parsedt...
CVE-2018-18852
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
Command injection
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
CVE-2018-18852
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
CVE-2018-18852
Cerio DT-300N devices, version 1.1.6–1.1.12, are affected by an OS command injection due to improper input validation in the web-interface PING feature (Save.cgi). The issue allows execution of arbitrary commands on the device; exploitation was observed in the wild in October 2018. CVSS details p...
com.dtstack:dt-insight-hive-shade (>=4.1.2-RELEASE <=4.1.3), io.eels:eel-hive_2.11 (=1.0.2) +4 more potentially affected by CVE-2017-12625 via org.apache.hive:hive-exec (=2.1.0)
org.apache.hive:hive-exec MAVEN version =2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.dtstack:dt-insight-hive-shade =4.1.2-RELEASE, =2.6.1, =2.6.1, =2.7.1 Source cves: CVE-2017-12625 Source...
Joomla DT Register 4.0.3 SQL Injection
Exploit Title : Joomla DT Register Components 4.0.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : dthdevelopment.com Software Download Link :...
Sql injection
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
DT Register for Joomla (extensions DT Register) contains an SQL injection in the calendar events endpoint. Affected versions are Joomla 3.x: before 3.1.12 and Joomla 2.5: before 2.8.18. The vulnerability arises in the URL path /index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events, whe...
Denial of Service Vulnerability in Yuvision Network Cameras
YUVAD IP Camera IPC232S-IR3-HF40-C-DT is a network camera produced by Zhejiang YUVAD Technology Co. A denial-of-service vulnerability exists in the YUVE Network Camera IPC232S-IR3-HF40-C-DT, which can be exploited by an attacker to cause the device to go down by sending variant protocol signaling...
com.amazon.emr:hive2-shims (>=5.0.0 <=5.6.0), com.boozallen.aissemble:extensions-data-delivery-spark (>=1.13.0-rc6 <=2.0.0) +59 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-exec (>=2.1.0 <=2.3.2)
org.apache.hive:hive-exec MAVEN version =2.1.0, =5.0.0, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =4.1.2-RELEASE, =4.0.0-preview22.0.1, =5.6.0, =4.1.0, =4.0.00.31.1-prerelease6, =4.0.0, =4.1.0, =4.2.0 and more Source cves: CVE-2018-1315 Source advisory: OSV:GHSA-P639-XXV5-J...
dt-shop.com XSS vulnerability
Open Bug Bounty ID: OBB-679205 Description| Value ---|--- Affected Website:| dt-shop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dt-shop.com XSS vulnerability
Open Bug Bounty ID: OBB-631788 Description| Value ---|--- Affected Website:| dt-shop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
gcc security, bug fix, and enhancement update
4.8.5-28.0.1 - Orabug: 27557686 Egeyar Bagcioglu - Introduce 'oraclerelease' into .spec file. Echo it to gcc/DEV-PHASE. 4.8.5-28 - Minor testsuite fixes to clean up test results 1469697 - retpoline support for spectre mitigation 1535655 4.8.5-27 - bump for rebuild with RELRO enabled even for...
DT Register,3.2.7,SQL Injection
DT Register by DTH Development, versions 3.2.7 and previous, SQL Injection resolution: update to 3.2.8 update notice: https://www.dthdevelopment.com/dth-news/dt-register-328-security-update...