5773 matches found
PT-2019-3273
Name of the Vulnerable Software and Affected Versions IntelR Raid Web Console 2 affected versions not specified Description The issue is related to an authentication bypass in the web console, potentially allowing an unauthenticated attacker to disclose information via network access. The...
PT-2019-3089
Name of the Vulnerable Software and Affected Versions IntelR Authenticate versions prior to 3.8 Description The issue is related to improper permissions in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to...
PT-2019-3262
Name of the Vulnerable Software and Affected Versions IntelR Processor Identification Utility for Windows versions prior to 6.1.0731 Description The issue is related to insufficient access control in a hardware abstraction driver, which may allow an authenticated user to potentially enable...
NewStart CGSL MAIN 5.04 : qemu-kvm Multiple Vulnerabilities (NS-SA-2019-0005)
The remote NewStart CGSL host, running version MAIN 5.04, has qemu-kvm packages installed that are affected by multiple vulnerabilities: - Quick Emulator QEMU, compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occ...
GHSA-FP5J-3FPF-MHJ5 Sensitive data written to disk unencrypted in Spark
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...
PT-2019-13818
Name of the Vulnerable Software and Affected Versions Open-School version 3.0 Community Edition version 2.3 Description The issue allows SQL Injection via the "index.php?r=students/students/document" endpoint, specifically the id parameter. Recommendations For Open-School version 3.0, update to a...
CVE-2019-14754: Improper Neutralization of Special Elements used in an SQL Command
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...
PYSEC-2019-114
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...
PT-2019-13790
Name of the Vulnerable Software and Affected Versions Open-School version 3.0 Community Edition version 2.3 Description The issue allows for XSS via the "osv/index.php?r=students/guardians/create" API endpoint, specifically through the id parameter. Recommendations For Open-School version 3.0,...
CVE-2019-14696: Improper Neutralization of Input During Web Page Generation
Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter...
Trivial Bug Turns Home Security Cameras Into Listening Posts
A vulnerability in the consumer-grade Amcrest IP2M-841B IP home security video camera would allow an attacker to remotely listen to the camera’s audio over the internet, without authentication. “Essentially, if this thing is connected directly to the internet, it’s anyone’s listening device,”...
Amcrest IP2M-841B Authentication Bypass Vulnerability
The Amcrest IP2M-841B is an IP camera from Amcrest. An authentication bypass vulnerability exists in the Amcrest IP2M-841B using firmware version 2.520.AC00.18.R. The vulnerability occurs when the program does not require authentication when accessing an HTTP endpoint/video call. An attacker coul...
CVE-2019-3570
Call to the scryptenc function in HHVM can lead to heap corruption by using specifically crafted parameters N, r and p. This happens if the parameters are configurable by an attacker for instance by providing the output of scryptenc in a context where Hack/PHP code would attempt to verify it by...
The vulnerability of the vGate platform protection tool, which allows intruders to influence the integrity and accessibility of information.
The vulnerability of the vGate virtualization platform’s security device stems from bypassing access control rules by performing unauthorized operations in the SKALA-R environment. Exploiting this vulnerability allows attackers to compromise the integrity and accessibility of information...
Amcrest IPM-721S License Issue Vulnerability
The Amcrest IPM-721S is a wireless IP camera from Amcrest. An authorization issue vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product...
R 3.4.4 (Windows 10 x64) - Buffer Overflow SEH (DEPASLR Bypass)
R 3.4.4 Windows 10 x64 - Buffer Overflow SEH DEPASLR Bypass !/usr/bin/python Exploit Title: R 3.4.4 Windows 10 x64 - Buffer Overflow SEHDEP/ASLR Bypass Date: 2019-07-15 Exploit Author: blackleitus Vendor Homepage: https://www.r-project.org/ Tested on: Windows 10 Home Single Language 64-bit Social...
Unspecified vulnerability in Amcrest IPM-721S (CNVD-2019-24191)
The Amcrest IPM-721S is a wireless IP camera from Amcrest. A vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. An attacker can use the vulnerability to bypass account protection mechanisms and brute-force credentials...
Unspecified vulnerability in Amcrest IPM-721S (CNVD-2019-24194)
The Amcrest IPM-721S is a wireless IP camera from Amcrest. A security vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. An attacker can exploit the vulnerability to download administrative credentials...
R 3.4.4 (Windows 10 x64) Buffer Overflow
!/usr/bin/python Exploit Title: R 3.4.4 Windows 10 x64 - Buffer Overflow SEHDEP/ASLR Bypass Date: 2019-07-15 Exploit Author: blackleitus Vendor Homepage: https://www.r-project.org/ Tested on: Windows 10 Home Single Language 64-bit Social: https://twitter.com/blackleitus Website:...
R 3.4.4 (Windows 10 x64) - Buffer Overflow SEH (DEP/ASLR Bypass)
!/usr/bin/python Exploit Title: R 3.4.4 Windows 10 x64 - Buffer Overflow SEHDEP/ASLR Bypass Date: 2019-07-15 Exploit Author: blackleitus Vendor Homepage: https://www.r-project.org/ Tested on: Windows 10 Home Single Language 64-bit Social: https://twitter.com/blackleitus Website:...