3611 matches found
picoTCP-NG and picoTCP Input Validation Error Vulnerabilities
Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...
Contiki and Contiki-NG Buffer Error Vulnerabilities
Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki and Contiki-NG suffer from a buffer error vulnerability that stems from processing...
Contiki and Contiki-NG Buffer Error Vulnerabilities
Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki-NG and Contiki suffer from a buffer error vulnerability that stems from a function...
Enum4Linux-Ng - A Next Generation Version Of Enum4Linux (A Windows/Samba Enumeration Tool) With Additional Features Like JSON/YAML Export
enum4linux-ng.py is a rewrite of Mark Lowe's former Portcullis Labs now Cisco CX Security Labs enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF players. The tool is mainly a wrapper around the Samba tools nmblookup, net,...
RHEL 7 : procps-ng (RHSA-2020:1464)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1464 advisory. The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top,...
CVE-2020-17494
Untangle Firewall NG before 16.0 uses MD5 for passwords...
CVE-2020-17494
Untangle Firewall NG before 16.0 uses MD5 for passwords...
CVE-2020-17494
Affected product: Untangle Firewall NG. Vulnerability: use of MD5 for passwords in versions before 16.0 (root cause: weak password hashing). Impact: knowledge of weak password storage; explicit exploitation details are not provided in the sources. Remediation: upgrade to version 16.0 or later (pe...
CVE-2020-17494
Untangle Firewall NG before 16.0 uses MD5 for passwords...
procps-ng bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
Ozeki NG SMS Gateway Arbitrary File Upload (CVE-2020-14022)
An arbitrary file upload vulnerability exists in Ozeki NG SMS Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ozeki NG SMS Gateway Directory Traversal (CVE-2020-14028)
A directory traversal vulnerability exists in Ozeki NG SMS Gateway. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server...
CVE-2020-14030
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...
CVE-2020-14030
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...
CVE-2020-14030
The CVE-2020-14030 issue affects Ozeki NG SMS Gateway (up to version 4.17.6). The vulnerability stems from storing SMS messages in .NET serialized format on the filesystem and then deserializing malicious .NET serialized files written to disk, which can trigger arbitrary code execution upon deser...
OS Command Injection
ng-packagr vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the styleIncludePaths option...
ng-packagr Command Injection Vulnerability
ng-packagr is an extension library for Js for individual developers . The library can be configured via a configuration file to package the developer's library into the APF format . A command injection vulnerability exists in ng-packagr versions prior to 10.1.1, which stems from command injection...
CVE-2020-7735
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...
