PT-2021-7615 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL-5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read vertex function of the Nef S2/SNC io parser.h component in the CGAL library. This allows a remote attacker to...

PT-2021-7585 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL libcgal version CGAL-5.1.1 Description: The issue is related to the Nef polygon-parsing functionality in the CGAL library, specifically in the SNC io parser component. It involves unverified array indexing in...

PT-2021-7598 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL libcgal version 5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read vertex function of the Nef S2/SNC io parser.h component in the CGAL library. This can be exploit...

PT-2021-7587 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to multiple code execution vulnerabilities in the Nef polygon-parsing functionality. A specially crafted malformed file can lead to an out-of-bounds read and type confusion,...

PT-2021-7593 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to multiple code execution vulnerabilities in the Nef polygon-parsing functionality. A specially crafted malformed file can lead to an out-of-bounds read and type confusion,...

PT-2021-7601 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL libcgal version 5.1.1 Description: The issue is related to the SNC io parser::read vertex function in the Nef S2/SNC io parser.h component of the CGAL library, which is used for computational geometry...

Sony IPELA Network Camera (ftpclient.cgi) Remote Stack Buffer Overflow

Summary IPELA is Sony's vision of the ultimate workplace, designed to revolutionize the way business communicates over global IP networks. IPELA products can improve the efficiency of your organization by connecting people and places with high-quality audio and video. The SNC-DH120T is an indoor...

CVE-2020-25375

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...

Cross site scripting

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...

CVE-2020-25375

WP SMART CRM (SoftradeWeb SNC) version 1.8.7 is affected by stored Cross Site Scripting via multiple customer fields (Business Name, Tax Code, First Name, Address, Town, Phone, Mobile, Place of Birth, Web Site, VAT Number, Last Name, Fax, Email, Skype). Root cause: inadequate input sanitization i...

CVE-2020-25375

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...

PT-2020-16072 · Softradeweb Snc · Wp Smart Crm

Name of the Vulnerable Software and Affected Versions: WP SMART CRM version 1.8.7 Description: The issue affects the Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM, where Cross Site Scripting is possible via several fields, including the Business Name field, Tax Code field, First Name fiel...

snc-lighting.com Cross Site Scripting vulnerability OBB-1287699

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Multiple SONY network cameras information disclosure vulnerability

SONY SNC-CH115 and so on are the network camera products of Japan Sony Sony company. An information disclosure vulnerability exists in several SONY network cameras using firmware versions prior to 2.7.2. The vulnerability can be exploited by an attacker to log in to the device with administrator...

Sony IPELA Engine IP Camera Detection (HTTP)

HTTP based detection of Sony IPELA Engine IP Cameras. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Sony IPELA ENGINE IP Cameras Backdoor Accounts Vulnerability

Sony IPELA ENGINE IP Cameras contain multiple backdoors that, among other functionality, allow an attacker to enable the Telnet/SSH service for remote administration over the network. Other available functionality may have undesired effects to the camera image quality or other camera functionalit...

Backdoor Vulnerability in Multiple Sony IPELA ENGINE IP Cameras

SNC-CH115, SNC-CH120 and SNC-CH160 are IP camera products from Sony. A backdoor vulnerability exists in multiple Sony IPELA ENGINE IP Cameras. A remote attacker can exploit the vulnerabilities to remotely manage the camera using Telnet/SSH services to gain root access to the Linux shell, affectin...

SAP Router - Timing Attack Password Disclosure

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Router Password Timing Attack 1. Advisory Information Title: SAP Router Password Timing Attack Advisory ID: CORE-2014-0003 Advisory URL:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for...

CVE-2013-3539

CVE-2013-3539 is a CSRF vulnerability in Sony camera web interfaces (command/user.cgi) affecting models such as SNC CH140/CH180/CH240/CH280 and SNC DH140/DH140T/DH180/DH240/DH240T/DH280. The flaw lets remote attackers hijack administrator authentication to issue requests that add users. Public re...