7206 matches found
CVE-2019-14706
A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker without authorization can upload a file to upload.php with a filename longer than 256 bytes. This will be placed in the updownload area. It will not be deleted, because...
Moderate: Red Hat Security Advisory: httpd security and bug fix update
An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Low: Red Hat Security Advisory: keycloak-httpd-client-install security, bug fix, and enhancement update
An update for keycloak-httpd-client-install is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py
It was discovered that keycloak-httpd-client-install uses a predictable log file name in /tmp. A local attacker could create a symbolic link to a sensitive location, possibly causing data corruption or denial of service...
CVE-2019-14699: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which can be run from the HTTPD web server...
CVE-2019-14700: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. There is disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This occurs because the filename specified in the TZ parameter is accessed with a substantial delay if that file exists...
CVE-2019-14702: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilities exist in 13 forms that are reachable through HTTPD. An attacker can, for example, create an admin account...
PT-2019-13795
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description An issue exists where SQL injection vulnerabilities are present in 13 forms reachable through HTTPD. This allows an attacker to create an admin account, among other potentia...
PT-2019-13797
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras firmware through 6400.0.8.5 Description A Server-Side Request Forgery SSRF issue was found in HTTPD on the affected cameras. This issue can be triggered via FTP commands when a newline character is included in the...
PT-2019-13792
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description The issue allows an attacker to exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which...
PT-2019-13796
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras with firmware through 6400.0.8.5 Description A CSRF issue was discovered in the HTTPD service, specifically affecting the "webparam?user&action=set¶m=add" API endpoint. This issue can be exploited to create an...
PT-2019-13791
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description A buffer overflow issue exists in a CGI program running under the HTTPD web server, specifically in the param parameter, which can lead to remote code execution in the conte...
CVE-2019-14698: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account...
PT-2019-13793
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description The issue allows disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This happens because the filename specified in the TZ parameter is accessed with...
CVE-2019-14703: Cross-Site Request Forgery (CSRF)
A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account...
CVE-2019-14704: Server-Side Request Forgery (SSRF)
An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field...
CentOS Update for httpd CESA-2019:1898 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
httpd security update
2.4.6-89.0.1 - replace index.html with Oracle's index page oracleindex.html 2.4.6-89.1 - Resolves: 1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in modauthdigest...
httpd:2.4 security update
httpd 2.4.37-11.0.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-11 - Resolves: 1695431 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: 1696090 - CVE-2019-0215 httpd:2.4/httpd: modssl:...
Low: Red Hat Security Advisory: httpd security update
An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...