CVE-2019-3819

A flaw was found in the Linux kernel in the function hiddebugeventsread in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user "root" can cause a system lock up and a denial of service. Versions from v4.18 and newe...

Troubleshooting "Database streaming channel is broken between HA nodes" error on ADM HA pair

The issue started occurring after the upgrade. This issue is only applicable to ADM devices in HA on 12.1 and 13.0 versions...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

Facturation System 1.0 - modid SQL Injection

Facturation System 1.0 - modid SQL Injection Exploit Title: Facturation System 1.0 - 'modid' SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://obedalvarado.pw/simple-invoice/ Software Link:...

The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.

The vulnerability in the FortiOS operating system’s web interface arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using the WTP Name or WTP Active Software Version request fields for...

CVE-2018-18394

Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-12410 TIBCO Spotfire Statistics Services remote execution vulnerabilities

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...

CVE-2018-17594

AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17588

AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17589

AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CIRCONTROL CirCarLife Information Disclosure Vulnerability

CIRCONTROL CirCarLife is a parking lot automation management system from Circontrol, Spain. An information disclosure vulnerability exists in CIRCONTROL CirCarLife versions prior to 4.3, which stems from the program's lack of authentication against /html/device-id. An attacker could exploit this...

Design/Logic Flaw

A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...

CVE-2018-15310

A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...

CVE-2018-15310

A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...

CVE-2018-15310

CVE-2018-15310 affects BIG-IP APM portal access. Affected versions are 11.5.1–11.5.7, 11.6.0–11.6.3, and 12.1.0–12.1.3, which disclose the BIG-IP software version in rewritten portal pages. This is an information disclosure vulnerability in the portal access component; the root cause is not fully...

CVE-2018-7921

Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjacent attackers may exploit this vulnerability to obtain device information...

Unable to upgrade Storefront

Unable to upgrade Storefront...

Cagintranet GetSimple CMS Cross-Site Scripting Vulnerability

Cagintranet GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the admin/edit.php page in Cagintranet...

IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO is a suite of identity and access management software from IBM in the United States that provides single sign-on. A security vulnerability exists in IBM ISAM ESSO version 8.2.2 that stems from the program's failure to set securit...