CVE-2019-18383

An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...

CVE-2019-18384

CVE-2019-18384 affects TerraMaster FS-210 devices (4.0.19). An authenticated remote non-administrative user can read unauthorized shared files, as shown by the substring filename=public %25252Fadmin_OnlyRead.txt. The connected RH Red Hat and CNVD/CVE records corroborate an information disclosure ...

CVE-2019-18384

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public%25252FadminOnlyRead.txt substring...

CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...

CVE-2019-18385

The CVE relates to TerraMaster FS-210 devices running 4.0.19 where an unauthenticated attacker can download log files through the include/makecvs.php?Event= substring. This is an information-disclosure vulnerability affecting the NAS’s web-accessible log files; the root cause is an insecure endpo...

kernel security and bug fix update

3.10.0-1062.4.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.4.1 - vhost vhost: make sure lognum innum Eugenio Perez 1750879 1750880...

CVE-2016-10951

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

Sql injection

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

CVE-2016-10951

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

CVE-2016-10951

CVE-2016-10951 affects the WordPress plugin fs-shopping-cart (version 2.07.02). The vulnerability is an SQL injection via the pid parameter, demonstrated by PoCs showing unescaped input in the admin context (e.g., UNION SELECT payloads). Connected documents corroborate an authenticated SQL inject...

Design/Logic Flaw

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9444

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

UBUNTU-CVE-2019-9444

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9444

CVE-2019-9444 affects the Android kernel’s sync debugfs driver, where a kernel pointer leak occurs due to using printf with %p. This leads to potential local information disclosure with system privileges required for exploitation. The vulnerability can be triggered locally, and user interaction i...

CVE-2019-9444

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-15938

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...

Buffer overflow

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...

CVE-2019-15938

Pengutronix barebox (through 2019.08.1) is affected by a remote buffer overflow in nfs_readlink_req (fs/nfs.c), where a length field is directly used in memcpy. This root cause enables an overflow over the network vector, with CVSS data indicating high/critical impact (network attack, no user int...

Design/Logic Flaw

An issue was discovered in the Linux kernel before 5.0.10. SMB2negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21...

RHEL 7 : kernel (RHSA-2019:2566)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2566 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Missing check in...