ABB PB610 IDAL HTTP server buffer overflow vulnerability

ABB PB610 is a software from ABB Switzerland that designs graphical user interfaces for the CP600 control panel platform. the IDAL HTTP server is one of the HTTP Hypertext Transfer Protocol servers. A buffer overflow vulnerability exists in the IDAL HTTP server in the ABB PB610 that can be...

LiveZilla Server Cross-Site Scripting Vulnerability (CNVD-2019-21246)

LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of mobile/index.php there is a cross-site scripting...

CVE-2019-7231

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that...

CVE-2019-12940

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...

Buffer Overflow Vulnerability in Tuneclone Software

TuneClone M4P Converter is a very easy to use software that can convert iTunes M4P, WMA music files to pure MP3. The Tuneclone software suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service to the server...

Buffer Overflow Vulnerability in Iperius Backup

Iperius Backup is an all-in-one backup software for PCs and servers. Iperius Backup suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service to a server...

Buffer Overflow Vulnerability in MOV Converter

Allok Soft Inc. specializes in the development of multimedia software for computers, providing universal video and audio conversion tools. A buffer overflow vulnerability exists in MOV Converter, which can be exploited by an attacker to cause a denial of service on the server...

Cisco Integrated Management Controller Numeric Error Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A numeric...

CVE-2019-1628 Cisco Integrated Management Controller Denial of Service Vulnerability

A vulnerability in the web server of Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could...

The vulnerability of the BIOS microprogramming software update tool for Cisco UCS Series C servers allows a hacker to install malicious BIOS microprogramming software on a vulnerable device.

The vulnerability of the Cisco UCS server microprogramming system’s BIOS update tool is related to insufficient checking of the firmware file. Exploiting this vulnerability allows an attacker to install malicious BIOS microprogramming on a vulnerable device by running the BIOS update tool with...

VulnCheck KEV: CVE-2013-5758

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files...

VulnCheck KEV: CVE-2009-2765

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI...

UBUNTU-CVE-2019-3888

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...

CVE-2019-12146

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. Attackers have the ability to abuse a flaw in the SCP listener by crafting strings using specific patterns to write files and create directories outside of their authorized director...

PT-2019-2477 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation on the host server of the Hyper-V hardware virtualization system in Windows. This allows a remote attacker to execute arbitrary...

PT-2019-12931 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.7 Description: An issue was discovered where the update server URL of com joomlaupdate can be manipulated by non Super-Admin users. Recommendations: For versions prior to 3.9.7, update to version 3.9.7 or later t...

RarmaRadio 'Server' Denial of Service Vulnerability

RarmaRadio is a free internet radio program. A denial of service vulnerability exists in RarmaRadio 'Server'. An attacker can exploit the vulnerability to launch a denial of service attack...

Cyrus IMAP Arbitrary Code Execution Vulnerability

Cyrus IMAP is a Unix and Linux-based operating system for supporting IMAP Interactive Mail Access Protocol protocol open source mail server . A security vulnerability exists in the CalDAV feature of httpd in Cyrus IMAP versions 2.5.x through 2.5.12 and 3.0.x through 3.0.9. A remote attacker could...

CVE-2018-19978

CVE-2018-19978 affects the Auerswald COMfort 1200 IP phone, firmware 3.4.4.1-10589. The vulnerability is a buffer overflow in the DHCP/PPPOE configuration web interface. An attacker authenticated as a simple user on the same network can trigger a crafted POST request to the web server (via the Ma...

CVE-2019-10965

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution...