23 matches found
ModulithShop 信任管理问题漏洞
ModulithShop is an online shopping mall system from the individual developers of Shopsuite. ModulithShop suffers from a Trust Management Issue vulnerability that stems from misbehavior of the component RSA/OAuth2/Database, which could lead to hard-coded credentials...
EUVD-2021-0070
Malware in sbrugna...
EUVD-2014-3360
Malware in sbrugna...
EUVD-2025-23579
Malicious code in bioql PyPI...
PT-2025-30762
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mod hdcp hdcp1 enable encryption function calls get first active display without checking its return value. If the display list is empty, get first active display returns a null...
多款Cisco产品处理逻辑错误漏洞
Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...
Nextcloud Server File Block Overwrite Vulnerability (NC-SA-2020-038)
Nextcloud Server is prone to a vulnerability where Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...
Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file (NC-SA-2020-038)
A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file...
Odoo Access Control Error Vulnerability (CNVD-2019-30570)
Odoo is an open source commercial system from the Belgian company Odoo. An access control error vulnerability exists in the password encryption module in Odoo version 9.0 Community and Enterprise, which can be exploited by an attacker to modify another user's password...
Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2019-15875)
The Cisco Firepower 2100 Series and Cisco Adaptive Security Virtual Appliance are both products of Cisco Corporation.The Firepower 2100 Series is a 2100 series firewall appliance.The Cisco Adaptive Security Virtual Appliance is a virtualized version of the Cisco ASA Adaptive Security Appliance. T...
PT-2017-19013 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.3-15152 Description: A design flaw in SYNO.API.Encryption allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter. Recommendations: For...
Wannacry depth of analysis: the first stage tasksche-vulnerability warning-the black bar safety net
WannaCry ransomware is a 2017 of the most popular ransomware, which uses a Microsoft vulnerability in the global range attacks make the world more than 100 countries, hundreds of thousands of users by the impact. Has a global range of network security education for all. As a security industry...
CVE-2014-3347
Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...
Design/Logic Flaw
Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...
CVE-2014-3347
Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...
CVE-2014-3347
Cisco 1800 Series ISR devices running IOS 15.1(4)M2 with ISDN BRI enabled are affected by CVE-2014-3347. The issue resides in the hardware entropy collection module: an interrupt timer collision triggered during entropy collection (knowledge of the ISDN phone number) can cause the hardware encryp...
WordPress 3.5.1, Denial of Service
Version 3.5.1 latest of popular blogging engine WordPress suffers from remote denial of service vulnerability. The bug exists in encryption module class-phpass.php. The exploitation of this vulnerability is possible only when at least one post is protected by a password. Time frames: 31.05.2013...
Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery
Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com...
Bitdefender 2011 File Vault - Buffer Overflow Vulnerability
Document Title: =============== Bitdefender 2011 File Vault - Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/262.wmv View: http://www.youtube.com/watch?v=98eA1cIAO8k Release Date: ============= 2011-09-01 Vulnerability Laboratory ...
Drupal AES Encryption Module Information Disclosure Vulnerability
The host is running Drupal AES Encryption Module and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbdrupalaesmoduleinfodiscvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Drupal AES Encryption Module Information Disclosure Vulnerability Authors: Sooraj KS...