5883 matches found
CVE-2018-6527
The CVE-2018-6527 issue affects D-Link DIR-868L, DIR-865L and DIR-860L routers. It is a cookie disclosure via an XSS-like flaw in htdocs/webinc/js/adv_parent_ctrl_map.php that can be triggered by a crafted deviceid parameter to soap.cgi, exposing cookie data. Root cause: inadequate protection of ...
CVE-2018-6529
The CVE-2018-6529 issue affects D-Link DIR-868L, DIR-865L, and DIR-860L routers (DIR868LA1 FW112b04 and earlier; DIR865L REVA FW1.08.B01 and earlier; DIR860LA1 FW110b04 and earlier). It is an XSS in htdocs/webinc/js/bsc_sms_inbox.php that allows remote attackers to read a cookie by sending a craf...
XSS Vulnerability in 360 Browser Reading Mode Plugin
360 Browser 360 Security Browser launched by Beijing Qihoo Technology Co. A DOMXSS vulnerability exists in the Reading Mode plugin of 360 Browser, where materialized tags can also trigger xss, leading to the execution of xss bypassing waf rules...
CVE-2017-5188
The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...
Medtronic 2090 Carelink Programmer Directory Traversal Vulnerability
The Medtronic 2090 Carelink Programmer is used by trained personnel in hospitals and clinics to program and manage Medtronic cardiac devices. The software deployment network for the affected product contains a directory traversal vulnerability that could allow an attacker to read files on the...
CVE-2018-4880
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...
vulners.com: [vulners.com] nginx alias_traversal
Incorrect configuration of alias could allow an attacker to read file stored outside the target folder. https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΡΠΎΠ»ΡΠΊΠΎ Π² ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ http, Π½Π° https ΡΠ°ΠΊΠΎΠ³ΠΎ Π½Π΅Ρ. ΠΡΠΈΠΌΠ΅Ρ: http GET /static../monit/COPYING HTTP/1.1 Host:...
CVE-2018-1000028
Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server nfsd that can result in remote users reading or writing files they should not be able to via NFS. This attack appear to be exploitable via NFS...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to trigger a service failure.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird arise from an operation that goes beyond the buffer boundaries in memory when reading certificates from the disk. Exploiting these vulnerabilities can allow a malicious actor to cause service failures using...
Semrush: XXE in Site Audit function exposing file and directory contents
Summary: The Project Site Audit function is vulnerable to XXE when parsing sitemap.xml files. Description: The Site Audit function spiders a given website and performs analysis on the discovered pages. In order to improve website spidering the URL of a sitemap.xml file can be provided. If provide...
CVE-2017-18038
Affected software: Atlassian Bitbucket Server (before 5.6.0). Vulnerability: repository settings resource allows path traversal via the default branch name, enabling remote attackers to read the first line of arbitrary files. Root cause: path traversal in the repository settings resource. Impact:...
Walt Disney Animation Studios PTEX Buffer Overflow Vulnerability
Walt Disney Animation Studios PTEX is a texture mapping system developed by Walt Disney Animation Studios. A buffer overflow vulnerability exists in Walt Disney Animation Studios PTEX version 2.2, which originates when the program fails to properly detect parameters when reading a file. An attack...
Out-of-bounds
An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffe...
CVE-2018-3835
An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffe...
QYKCMS template.php page has an arbitrary file reading vulnerability
QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS template.php page arbitrary file reading vulnerability. The vulnerability is caused by the system does not effectively filter parameters. Attackers can use the vulnerability to obtain sensitive...
Walt Disney Per-Face Texture Mapping faceInfoSize Code Execution Vulnerability
Summary An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to...
Domain Analyzer - Analyze The Security Of Any Domain By Finding All the Information Possible
Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. How Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP...
Multiple Apple Products Kernel Competition Condition Vulnerability
Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a smart TV operating system. watchOS is a smart watch operating system...
Advantech WebAccess/SCADA Directory Traversal Vulnerability
Advantech WebAccess is a browser-based HMI software package for human machine interfaces, as well as monitoring and data acquisition SCADA. A directory traversal vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to read files in the directory structure of a...
January 19, 2017 β Morning Cyber Coffee Headlines β βPuppiesβ Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. Weβve got just enough information below to get you through that first cupβ¦enjoy! January 19, 2018 - Headlines The Five Laws Of Cybersecurity - Forbes 3 things y...