783 matches found
Product update: Virtuozzo 7.0 Update 9 Hotfix 1 (7.0.9-539)
The Hotfix 1 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-92228 Provided updated packages for Object Storage S3. Vulnerability id: PSBM-92227 A few unused role names were shown and could be assigned on the network interface settings screen in Virtuozz...
The vulnerability of Siemens Sinumerik programmable logic controllers lies in their exception handling errors, which allow attackers to trigger a service failure of the embedded network interface or execute arbitrary code within the context of the network interface.
The vulnerability of Siemens Sinumerik programmable logic controllers is related to an exception handling error. Exploiting this vulnerability can allow an attacker to cause a failure in the embedded network interface controller or enable the execution of arbitrary code within the network interfa...
Cross-site Scripting (XSS)
foreman is vulnerable to cross-site scripting. A remote authenticated attacker is able to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...
January 8, 2019—KB4480970 (Monthly Rollup)
None None...
Buffer overflow
An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...
CVE-2018-20299
The CVE affects Bosch Smart Home cameras (360° indoor and Eyes outdoor) with firmware prior to 6.52.4. A buffer overflow in the web server’s RCP+ parser allows a remote attacker over the network to potentially achieve unauthorized code execution on the device. The vulnerability has a network atta...
CVE-2018-19036
An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...
Input validation
An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...
Input validation
Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...
CVE-2018-14852
Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...
December 11, 2018—KB4471318 (Monthly Rollup)
None None...
December 11, 2018—KB4471330 (Monthly Rollup)
None None...
November 27, 2018—KB4467108 (Preview of Monthly Rollup)
None None...
November 13, 2018—KB4467107 (Monthly Rollup)
None None...
October 9, 2018—KB4462923 (Monthly Rollup)
None None...
October 9, 2018—KB4462929 (Monthly Rollup)
None None...
September 20, 2018—KB4457139 (Preview of Monthly Rollup)
None None...
CVE-2018-1000217
Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON library. If application provides network...
CVE-2018-1000217
Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON library. If application provides network...