Typesettercms 5.0.1 Cross Site Request Forgery

Document Title: =============== Typesettercms v5.0.1 - Delete Files CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1889 Release Date: ============= 2016-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 188...

Davolink DV-2051 - Multiple Vulnerabilities

=================================================================== Title: Unauthenticated admin password change Product: Davolink modem Tested model: DV-2051 Vulnerability Type: Missing Function Level Access Control CWE-306 Risk Level: High Solution Status: No fix available Discovered and...

FortiCloud Cross Site Scripting

Document Title: =============== FortiCloud - Reports Summary Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1735 Release Date: ============= 2016-08-05 Vulnerability Laboratory ID VL-ID:...

Zoll ePCR 2.6.4 Script Insertion

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...

FortiManager Script Insertion

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Release Notes 1:...

WinSaber Privilege Escalation

Document Title: =============== WinSaber - Unquoted Service Path Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1879 Release Date: ============= 2016-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 1879...

WinSaber - Unquoted Service Path Privilege Escalation

Document Title: =============== WinSaber - Unquoted Service Path Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1879 Release Date: ============= 2016-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 1879...

Zoll Checklist 1.2.2 Script Insertion

Document Title: =============== Zoll Checklist v1.2.2 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1881 Release Date: ============= 2016-07-27 Vulnerability Laboratory ID VL-ID:...

Silurus Classifieds 2.0 Cross Site Scripting

Title: Silurus Classifieds XSS Vulnerability Software : Silurus Classifieds Software Version : v2.0 Vendor: http://snowhall.com/slides/silurus Vulnerability Published : 2016-07-25 Author：zhiweijiang Email:[email protected] Impact : MediumCVSS2 Base : 4.3, AV:N/AC:M/Au:N/C:N/I:P/A:N Bug...

Huawei ISM Professional Cross Site Scripting

Title: Huawei ISM Professional XSS Vulnerability Software : ISM Professional OceanStor Software Version : CopyrightHuawei Technologies Co., Ltd. 2009-2010. All rights reserved. Vendor: www.huawei.com Vulnerability Published : 2016-07-25 Author：zhiweijiang Email:[email protected] Impact :...

DornCMS v1.4 - (FileManager) Persistent XSS Vulnerability

Document Title: =============== DornCMS v1.4 - FileManager Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1885 Release Date: ============= 2016-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability

Document Title: =============== Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1886 Release Date: ============= 2016-07-26 Vulnerability Laboratory ID VL-ID: ====================================...

DornCMS v1.4 - (FileManager) Persistent XSS Vulnerability

Document Title: =============== DornCMS v1.4 - FileManager Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1885 Release Date: ============= 2016-07-25 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Intel BIOS locking mechanism contains race condition that enables write protection bypass

Lenovo Security Advisory: LEN-2015-001 Potential Impact: Denial of Service, Elevation of Privilege Severity: Medium Summary: A race condition exists in computers using Intel chipsets that rely solely on two particular BIOS write locking mechanisms. Successful exploitation of this race condition m...

S3 Boot Script Protection

Lenovo Security Advisory: LEN-2014-006 Potential Impact: Elevation of Privilege Severity: Medium Summary: Certain firmware implementations may not correctly protect memory that stores the BIOS S3 Boot Script when a system is suspended. Exploitation of such vulnerabilities could potentially lead t...

Unauthorized Modification of UEFI Variables in UEFI Systems

Lenovo Security Advisory: LEN-2014-002 Potential Impact: Modifications of UEFI variables Severity: Medium Summary: Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead t...

UEFI EDK2 Capsule Update Vulnerabilities

Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...

SMM "Incursion" Attack

Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 52 to the stable channel for Windows, Mac and Linux. Chrome 52.0.2743.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

SQL Injection in TYPO3 Frontend Login

It has been discovered, that TYPO3 is susceptible to SQL Injection. Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Frontend Login Vulnerability Type: SQL Injection Affected Versions: Versions 6.2.0 to 6.2.25 and 7.6.0 to 7.6.9 Severity: Medium Suggested CVSS v2.0:...