CVE-2017-2828: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

CVE-2017-2827: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

CVE-2017-2805: Out-of-bounds Write

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send ...

PT-2017-15563

Name of the Vulnerable Software and Affected Versions Foscam C1 Indoor HD Camera version 2.52.2.37 Description A command injection issue exists in the web management interface. It allows a user to inject arbitrary shell characters during account creation, resulting in command injection, by sendin...

PT-2017-15567

Name of the Vulnerable Software and Affected Versions Foscam C1 Indoor HD Camera version 2.52.2.37 Description A buffer overflow issue exists in the web management interface, allowing an attacker to send a specially crafted HTTP request to trigger the vulnerability, resulting in the overwriting o...

PT-2017-15565

Name of the Vulnerable Software and Affected Versions Foscam C1 Indoor HD Camera version 2.52.2.37 Description A directory traversal issue exists in the web management interface, allowing a specially crafted HTTP request to cause the application to read a file from disk. The failure to filter...

PT-2017-15564

Name of the Vulnerable Software and Affected Versions Foscam C1 Indoor HD Camera version 2.52.2.37 Description A command injection issue exists in the web management interface of the affected device. It can be triggered by sending a specially crafted HTTP request, allowing an attacker to inject...

PT-2017-15566

Name of the Vulnerable Software and Affected Versions Foscam C1 Indoor HD Camera version 2.52.2.37 Description A buffer overflow issue exists in the web management interface of the affected device. This can be triggered by a specially crafted HTTP request, potentially allowing an attacker to...

Foscam IP Video Camera CGIProxy.fcgi Gateway Address Configuration Command Injection Vulnerability

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configurati...

CVE-2017-6659

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected...

UBUNTU-CVE-2017-4965

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2017-6661

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2017-6659

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected...

CVE-2017-6659: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected...

PT-2017-17224

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.50 through 11.6 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform...

PT-2017-17225

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA versions 10.0.0-203 through 10.1.0-049 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing an unauthenticate...

CVE-2017-6661: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

PT-2017-4084 · Pivotal +1 · Rabbitmq +1

Name of the Vulnerable Software and Affected Versions: RabbitMQ versions 3.4.x through 3.5.x RabbitMQ versions 3.6.x prior to 3.6.9 RabbitMQ for PCF versions 1.5.x RabbitMQ for PCF versions 1.6.x prior to 1.6.18 RabbitMQ for PCF versions 1.7.x prior to 1.7.15 Description: The issue is related to...

Cross-Site Request Forgery Vulnerability in Multiple Peplink Balance Products

Peplink Balance 305 and others are multi-exit load balancing routers for medium-sized businesses. A cross-site request forgery vulnerability exists in several Peplink Balance products using firmware versions prior to fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093, which stems from a CGI...

PT-2017-3755

Name of the Vulnerable Software and Affected Versions: Cisco Secure ACS versions 5.80.8 through 5.81.5 Description: The issue is related to incorrect validation and lack of encryption of user data in the web-based management interface. This could allow a remote attacker to conduct a stored...