2900 matches found
CVE-2018-18505
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
CVE-2019-3819
A flaw was found in the Linux kernel in the function hiddebugeventsread in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user "root" can cause a system lock up and a denial of service. Versions from v4.18 and newe...
Troubleshooting "Database streaming channel is broken between HA nodes" error on ADM HA pair
The issue started occurring after the upgrade. This issue is only applicable to ADM devices in HA on 12.1 and 13.0 versions...
CVE-2018-19214
Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...
Facturation System 1.0 - modid SQL Injection
Facturation System 1.0 - modid SQL Injection Exploit Title: Facturation System 1.0 - 'modid' SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://obedalvarado.pw/simple-invoice/ Software Link:...
The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.
The vulnerability in the FortiOS operating system’s web interface arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using the WTP Name or WTP Active Software Version request fields for...
CVE-2018-18394
Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-12410 TIBCO Spotfire Statistics Services remote execution vulnerabilities
The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...
CVE-2018-17594
AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17589
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17587
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17588
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CIRCONTROL CirCarLife Information Disclosure Vulnerability
CIRCONTROL CirCarLife is a parking lot automation management system from Circontrol, Spain. An information disclosure vulnerability exists in CIRCONTROL CirCarLife versions prior to 4.3, which stems from the program's lack of authentication against /html/device-id. An attacker could exploit this...
CVE-2018-15310
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
Design/Logic Flaw
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
CVE-2018-15310
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
CVE-2018-15310
CVE-2018-15310 affects BIG-IP APM portal access. Affected versions are 11.5.1–11.5.7, 11.6.0–11.6.3, and 12.1.0–12.1.3, which disclose the BIG-IP software version in rewritten portal pages. This is an information disclosure vulnerability in the portal access component; the root cause is not fully...
CVE-2018-15310: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
PT-2018-12954
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.7 F5 BIG-IP versions 11.6.0 through 11.6.3 F5 BIG-IP versions 12.1.0 through 12.1.3 Description A vulnerability in the BIG-IP APM portal access discloses the BIG-IP software version in rewritten pages...