PT-2020-19895 · Intellian · Intellian Satellian +1

Name of the Vulnerable Software and Affected Versions: Intellian Aptus Web version 1.24 Intellian Satellian version 1.12 Description: The issue allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the "cgi-bin/libagent.cgi" URI. A valid sid cookie for a log...

Arbitrary File Download Vulnerability in Cruise Cloud Light Forum System

Cruise Cloud Light Forum System is an open source web application based on JAVA + MYSQL architecture, including forums, Q&A modules. Patrol Cloud Light Forum system has an arbitrary file download vulnerability, attackers can use this vulnerability to download arbitrary files to obtain sensitive...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

CVE-2019-19698

CVE-2019-19698 affects the libwav library (marc-q libwav) up to version 2017-04-20. The root cause is a NULL pointer dereference in wav_content_read() located in libwav.c, which can lead to a denial of service. Multiple sources (NVD, Red Hat, CVE databases, CNVD, PRION, CVELIST) corroborate the s...

CVE-2014-1238

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

Cross site scripting

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

CVE-2014-1238

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...

CVE-2014-1238

This CVE (CVE-2014-1238) is a Cross-Site Scripting (XSS) in Gael/Q-Pulse 0.6 and earlier, affecting the UI path ui/common/managedlistdialog.aspx. The vulnerability arises from unvalidated input being inserted into a JavaScript variable named $RootTree, exploitable via a crafted URL (e.g., LookupL...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

Race condition

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

CVE-2019-13555

CVE-2019-13555 affects Mitsubishi Electric MELSEC-Q Series (Q03/04/06/13/26UDVCPU, Q04/06/13/26UDPVCPU, Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU) and MELSEC-L Series (L02/06/26CPU, L26CPU-BT, L02/06/26CPU-P, L26CPU-PBT, L02/06/26CPU-CM, L26CPU-BT-CM). A remote attacker can cause the FTP servic...

q-wigan-athletic.talent-boxoffice.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015574 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Mitsubishi Electric MELSEC-Q Series and Mitsubishi MELSEC-L Series Resource Management Error Vulnerability

Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series programmable logic controller from Mitsubishi Electric, Japan.Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controller from Mitsubishi, Japan. Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controlle...

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC-Q Series and MELSEC-L Series CPU Modules Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may...

CVE-2018-11358

A use-after-free flaw was found in the code responsible for processing packages from Q.931 protocol, in wireshark. An attacker can send specially crafted packages over the network which, when received, would cause an application to crash, or potentially, corrupt information...

Cisco IOS ISDN Interface Denial of Service Vulnerability

According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the ISDN functions which could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information element...

CVE-2019-16348

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

Null pointer dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

CVE-2019-16348

CVE-2019-16348 affects marc-q’s libwav up to 2017-04-20, where a NULL pointer dereference occurs in the function referenced as gain_file() in wav_gain.c. The issue is documented as a NULL pointer dereference without publicly disclosed details on exploitation vectors within the provided sources. S...