CVE-2017-18819

Summary of CVE-2017-18819 : NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by an incorrect configuration of security settings. The affected component is the security configuration of ReadyNAS OS 6, with the root cause described as a misconfiguration. The av...

CVE-2017-18819

NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings...

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

A flaw was found in Apache Tomcat. The HTTP header parsing code used an approach to end-of-line EOL parsing that allowed some invalid HTTP headers to be parsed as valid. This led to the possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the...

CVE-2017-18823

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F...

We Need to Change the Structure of Security to Transform Security

We Need to Change the Structure of Security to Transform Security Tom Corn, Senior Vice President of Security Products at VMware, was recently recorded giving his overview of the fundamental problem companies have with security today. His answer — we’ve got too much happening in silos and too muc...

Atomic Alarm Clock 6.3 Unquoted Service Path

Exploit Title: Atomic Alarm Clock x86 - Local Privilege Escalation Exploit Author: Bobby Cooke Date: 04/17/2020 Vendor Homepage: http://www.drive-software.com Software Link: http://www.drive-software.com/download/ataclock.exe Version: 6.3 Tested On: Windows 10 Pro 1909 32-bit Vulnerability Type:...

ALLE INFORMATION School Manage System Code Issue Vulnerability

ALLE INFORMATION School Management System is a school management system from ALLE INFORMATION in Taiwan, China. A code issue vulnerability exists in ALLE INFORMATION School Manage System prior to version 2020, which stems from a misconfiguration of the file upload filter. The vulnerability can be...

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration...

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration...

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration...

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration...

CVE-2019-20693

NETGEAR WAC505 and WAC510 wireless access points are affected by a misconfiguration of security settings, applicable to WAC505/WAC510 firmware prior to 8.0.6.4. Root cause: security settings misconfiguration. Impact per cited metrics: confidentiality and integrity are LOW; availability not affect...

CVE-2019-20693

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

NETGEAR RAX40 Input Validation Error Vulnerability

The NETGEAR RAX40 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RN42400 prior to version 6.10.2, which stems from a misconfiguration of security settings. No details of the vulnerability are provided at this time...

CVE-2019-20654

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

CVE-2019-20654

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

CVE-2019-20648

The CVE-2019-20648 entry concerns NETGEAR RN42400 devices with firmware older than 6.10.2, affected by a misconfiguration of security settings. The issue is documented across multiple sources, stating the vulnerability arises from incorrect security configuration rather than a software flaw in a ...

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

CVE-2020-10507 ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload RCE , that would allow attackers to gain access in the hosting machine...