PT-2022-12298 · Velneo · Velneo Vclient

Name of the Vulnerable Software and Affected Versions: Velneo vClient version 28.1.3 Description: The issue allows an attacker with knowledge of the victim's username and hashed password to spoof the victim's id against the server. Recommendations: For Velneo vClient version 28.1.3, consider...

CVE-2021-24662

The Game Server Status WordPress plugin through 1.0 does not validate or escape the serverid parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page...

UBUNTU-CVE-2018-12689

phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serverid parameter in a cmd.php?cmd=loginform request, or a crafted username and password in the login panel...

DEBIAN-CVE-2018-12689

phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serverid parameter in a cmd.php?cmd=loginform request, or a crafted username and password in the login panel...

haproxy: Setting cookie containing internal IP address of a pod

An information disclosure flaw was discovered in haproxy as used by OpenShift Enterprise; a cookie with the name "OPENSHIFTnamespaceSERVERID" was set, which contained the internal IP address of a pod...

MediaHouse Software Statistics Server 4.28/5.1 "Server ID" Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the Server ID field of the login webpage. While the login webpage has a 16 character restriction, this is easily...

MODBUS/TCP 'Report Server ID' Function Code Detection

Binary data 7103.pasl...

XOOPS xoopsConfig[language] Parameter Local File Inclusion (DSECRG-08-040)

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'xoopsConfiglanguage' parameter before passing it to a PHP 'includeonce' function in 'xoopslib/modules/protector/main.php'. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker...

Moodle < 1.9.4 'filter/tex/texed.php' 'pathname' Parameter RCE

Binary data 4788.prm...

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow source: https://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16...