8718 matches found
PT-2017-3434
Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products versions 1.0 through 1.32 Description An Information Exposure issue allows a remote unauthenticated attacker to use Monitor Mode on the device to read diagnostic information. The...
openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support
It was found that the boundary checks in the code implementing support for pre-authentication compression could have been optimized out by certain compilers. An attacker able to compromise the privilege-separated process could possibly use this flaw for further attacks against the privileged...
IDERA Uptime Monitor SQL Injection Vulnerability
IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. An SQL injection vulnerability exists in the...
XenServer Host Console Not Visible On Some High-Resolution Monitors
Due to resolution incompatibility issues on some high-resolution monitors the host console may not be visible when booted The following monitors have been confirmed to have this issue: Dell, U2312HM, 23", 16:9, 1920 x 1080 Philips, 226V6QSB6, 21.5", 16:9, 1920X1080 AOC, I2280SWD, 22", 16:9,...
Course Name Disclosure
Moodle is vulnerable to course name disclosure. Authenticated attackers can leverage a flaw in admin/tool/monitor/lib.php to find hidden course names by subscribing to rules. These attacks are possible because moodle ignores the moodle/course:viewhiddencourses capability...
Object injection
SECURITY Fix potential object injection vulnerability. CVE-2018-19296. Reported by Sehun Oh of cyberone.kr. Added Tagalog translation, thanks to @StoneArtz Added Malagache translation, thanks to @Hackinet Updated Serbian translation, fixed incorrect language code, thanks to @mmilanovic4 Updated...
Information Disclosure
Moodle is susceptible to unauthorized information access. If the event monitor tool contains site-wide rules, a malicious user can subscribe to them and access sensitive information...
IDERA Uptime Monitor SQL Injection Vulnerability
IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. An SQL injection vulnerability exists in the...
macOS Fruitfly Backdoor Analysis Renders New Spying Capabilities
LAS VEGAS—The FruitFly backdoor became a known entity in January, but it’s a good bet that for years it had been in the wild, undetected by analysts and security software. The macOS and OS X malware has a number of insidious spying capabilities that would make anyone uneasy, and a variant recentl...
IDERA Uptime Monitor Path Traversal Vulnerability
IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. A directory traversal vulnerability exists in the get2post.php file in IDER...
MySQL Enterprise Monitor 3.2.x < 3.2.8.2223 / 3.3.x < 3.3.4.3247 Multiple Vulnerabilities (July 2017 CPU)
According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.8.2223 or 3.3.x prior to 3.3.4.3247. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Apache Tomcat component in the handling of pipelin...
CVE-2017-11471
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...
CVE-2017-11470
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...
Sql injection
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...
CVE-2017-11469
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...
Directory traversal
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...
Sql injection
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...
CVE-2017-11469
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...