PT-2019-17489

Name of the Vulnerable Software and Affected Versions YouPHPTube version 7.6 Description An exploitable SQL injection issue exists in the authenticated part of the software. Specially crafted web requests can cause SQL injections, potentially allowing exfiltration of the database and user...

CVE-2019-5116: Improper Neutralization of Special Elements used in an SQL Command

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause a SQL injection. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

YouPHPTube /objects/pluginSwitch.json.php Multiple SQL Injection Vulnerabilities

Summary Exploitable SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2018-18879: Improper Control of Generation of Code

In firmware version MS2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as user input is not sanitized in networkdiags.php...

PT-2019-12097

Name of the Vulnerable Software and Affected Versions Fujifilm FCR Capsula X version CR-IR 357 Fujifilm FCR Carbon X version CR-IR 357 Fujifilm FCR XC-2 version CR-IR 357 Description The issue concerns the provision of insecure telnet services that lack authentication requirements. This could all...

CVE-2019-10950: Improper Access Control

Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying...

Fujifilm CR-IR 357 FCR Carbon X, FCR XC-2 and FCR Capsula X Input Validation Error Vulnerability

The Fujifilm CR-IR 357 FCR Carbon X, among others, is a radiological medical image reading device from Fujifilm, Japan. An input validation error vulnerability exists in Fujifilm CR-IR 357 FCR Carbon X, FCR XC-2, and FCR Capsula X. The vulnerability, which arises from a networked system or produc...

UBUNTU-CVE-2018-17188

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

CVE-2018-17188

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

PT-2019-9408

Name of the Vulnerable Software and Affected Versions CouchDB versions prior to 2.3.0 Description The issue allowed CouchDB admin users to access the underlying operating system as the CouchDB user, potentially leading to full system entry for unauthenticated users when combined with other...

CVE-2016-9048

Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially...

CVE-2016-9498

ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be exploited by remote user without authentication and it allows to execute remote code compromising the application as well as the operating system. As Application...

CVE-2018-8861

Vulnerabilities within the Philips Brilliance CT kiosk environment Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior could enable a limited-access kiosk user or an unauthorized...

Information disclosure

Vulnerabilities within the Philips Brilliance CT kiosk environment Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior could enable a limited-access kiosk user or an unauthorized...

Multiple Cisco Products Cisco NX-OS System Software Command Injection Vulnerability

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches are switches.Nexus 2000 Series Fabric Extenders are Nexus 2000 Series Array Extenders.NX-OS System Software is a set of operating systems used in them.CLI is a command line program used in...

The vulnerabilities of console ports on line-of-duty cards of CISCO ASR 1000 and Cisco cBR-8 series routers allow attackers to gain access to the operating system and influence the confidentiality, integrity, and availability of data.

The vulnerability of console ports on Cisco ASR 1000 and Cisco cBR-8 line cards is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to the operating system and compromise the confidentiality, integrity, and...

CVE-2017-12239: Use of Hard-coded Credentials

A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to access an affected device's operating system. The vulnerability exists because an...

PT-2017-2987

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 Series Aggregation Services Routers versions 3.16 through 16.5 Cisco cBR-8 Converged Broadband Routers versions 3.16 through 16.5 Description A vulnerability in the motherboard console ports of line cards for Cisco ASR 1000 Seri...

CVE-2017-2341

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

iBaby M3S Privilege Acquisition Vulnerability

The iBaby M3S is a video monitoring device for babies. A privilege acquisition vulnerability exists in iBaby M3S. An attacker can exploit this vulnerability to gain access to the underlying operating system...