Moxa IKS and EDS Sensitive Data Lack of Encryption Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A lack of encryption vulnerability exists in the Moxa IKS and EDS series for sensitive data. The vulnerability stems from the fact that these devices use plaintext to transmit sensitive data. An attacker could exploit the...

Oracle VM VirtualBox Core Component Privilege Escalation

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Microsoft .NET Framework Information Disclosure

The vulnerability of the search function in the Microsoft .NET Framework lies in the lack of authentication for the HTTP requests that are executed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information through a specially crafte...

BELL-CVE-2018-1000876 CVE-2018-1000876 does not affect BellSoft software

Bulletin has no description...

(0Day) INVT Electric VT-Designer File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing ...

Mozilla Firefox Reader View Unauthorized Access

The vulnerability of the Reader View reading mode in Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

Unspecified Vulnerability in Beckhoff TwinCAT (CNVD-2019-42855)

Beckhoff TwinCAT is a software system consisting of a real-time environment and a real-time system for executing control programs in a development environment for programming, diagnostics and system configuration. A security vulnerability exists in Beckhoff TwinCAT, which results from the program...

Path traversal

626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path...

AirLink Router Arbitrary Command Execution

The vulnerability of the AirLink router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using metasymbols on certain pages /goform/...

BELL-CVE-2017-14974 CVE-2017-14974 does not affect BellSoft software

Bulletin has no description...

PT-2017-19223 · Sma Solar Technology · Sunny Tripower +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products affected versions not specified Sunny Boy versions TLST-21 and TL-21 Sunny Tripower versions TL-10 and TL-30 Description: The SMAdata2+ communication protocol in SMA Solar Technology products does not properly us...

Android Code Execution

The vulnerability of Qualcomm’s Android operating system’s media codecs is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HP System Management Homepage Information Disclosure

The vulnerability of the HP System Management Homepage software relates to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information...

iOS Access Control Bypass

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access control rules remotely...

SQL Injection Vulnerability in the infoflowId Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the infoflowId parameter of the Wave...

Firefox XSS

The vulnerability of the nsCSPHostSrc::permits function in Firefox exists due to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code remotely...

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

BELL-CVE-2014-0155 CVE-2014-0155 does not affect BellSoft software

Bulletin has no description...

Fedora Update for killbots FEDORA-2013-13499

Check for the Version of killbots OpenVAS Vulnerability Test Fedora Update for killbots FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DEBIAN-CVE-2012-6578

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics...