17120 matches found
Fedora Update for bind-dyndb-ldap FEDORA-2019-73a8737068
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability
Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...
Vulnerability of SAP SQL Anywhere, SAP IQ, and SAP Dynamic Tiering database management systems, related to insufficient protection of registration data, allows unauthorized access by attackers to protected information.
The vulnerability of SAP SQL Anywhere, SAP IQ, and SAP Dynamic Tiering database management systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ALPINE-CVE-2019-14834
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service memory consumption via vectors involving DHCP response creation...
Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has a logic flaw vulnerability
The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...
Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has information leakage vulnerability
The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...
Swift Compressor Software suffers from dll hijacking vulnerability
Swift compression software is an efficient and intelligent picture compression, PDF compression, video compression software. Support batch compression, lossless compression, effectively solve the problem of oversized files. Swift Compressor has a dll hijacking vulnerability that can be exploited ...
XSpear v1.3 - Powerfull XSS Scanning And Parameter Analysis Tool
XSpear is XSS Scanner on ruby gems Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser with Selenium Testing request/response for XSS protection bypass and reflectedor all params Reflected Params All paramsfor blind xss, anytings Filtered test...
Design/Logic Flaw
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
CVE-2018-12359
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60,...
Cloud Calendar is vulnerable to dll hijacking
Cloud Calendar is a time management tool developed by Qingdao Softmedia Network Technology Co. A dll hijacking vulnerability exists in the Cloud Calendar client, which can be exploited by attackers to execute arbitrary code...
Oriental Wealth Independent Trading Terminal has dll Hijacking Vulnerability
Oriental Wealth Independent Trading Terminal is a software for securities trading under Oriental Wealth. There is a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...
Yuetbook PDF Reader has dll hijacking vulnerability
Yue book PDF reader is a PDF reader developed by Shenzhen Evergreen Technology Co. Yueshu PDF dll hijacking vulnerability, an attacker can exploit the vulnerability to execute arbitrary code...
NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Vulnerability (NS-SA-2019-0232)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has bind packages installed that are affected by a vulnerability: - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various...
CVE-2019-20072
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
OpenBSD - Dynamic Loader chpass Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenBSD Dynamic Loader chpass Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the OpenBSD ld.so dynamic loader...
CVE-2019-20072
CVE-2019-20072 corresponds to a cross-site scripting vulnerability in Netis DL4323 devices, exploitable via the hostname parameter in form2Ddns.cgi used for Dynamic DNS configuration. The issue stems from insufficient input validation in the web application, enabling execution of arbitrary client...
