Elastic Kibana X-Pack Open Redirect Vulnerability

Elastic Kibana is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:x-pack";...

Security Advisory - DoS Vulnerability in Timergrp Module of Some Huawei Products

There is an DoS vulnerability in Timergrp module of some Huawei products due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to...

Input validation

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

CVE-2017-11319

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

CVE-2017-11319

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

CVE-2017-11319: Improper Privilege Management

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

PT-2017-11917

Name of the Vulnerable Software and Affected Versions Perspective ICM Investigation & Case version 5.1.1.16 Description The issue allows remote authenticated users to modify access level permissions, potentially gaining privileges. This is due to insufficient validation methods and missing...

PT-2017-3568

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus Acknowledge method requests handling. This allows a remote attacker to execute arbitrary co...

PT-2017-14007

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14010

Name of the Vulnerable Software and Affected Versions Huawei DP300 V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R002C10 Huawei NIP6300...

PT-2017-14009

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

PowerDNS Recursor Multiple Vulnerabilities (2017-03, 2017-05, 2017-07)

PowerDNS Recursor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:powerdns:recursor";...

[ASA-201711-31] powerdns-recursor: multiple issues

Arch Linux Security Advisory ASA-201711-31 ========================================== Severity: Medium Date : 2017-11-27 CVE-ID : CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094 Package : powerdns-recursor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-5...

CVE-2017-8120

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8124

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8126

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8119

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8122

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8129

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...