CVE-2019-14304

The CVE-2019-14304 entry concerns Ricoh SP C250DN 1.06 devices with a Cross-site Request Forgery (CSRF) vulnerability in the device’s web interface. The issue is described as CSRF allowing unintended operations to be performed when a user visits a crafted page; multiple sources (NVD, Red Hat advi...

PT-2020-9548 · Ricoh · Ricoh Sp C250Dn

Name of the Vulnerable Software and Affected Versions: Ricoh SP C250DN version 1.06 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For version 1.06, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...

sp-finance.e-monsite.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1055195 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sp-finance.e-monsite.com...

UBUNTU-CVE-2019-20096

In the Linux kernel before 5.1, there is a memory leak in featregistersp in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b...

Linux kernel '__feat_register_sp()' function memory leak vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in the 'featregistersp' function in the net/dccp/feat.c file in versions of Linux kernel prior to 5.1. An attacker could exploit thi...

RICOH SP 4510SF Printer - HTML Injection

RICOH SP 4510SF Printer - HTML Injection Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Produ...

RICOH SP 4510SF Printer - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH SP 4510SF Printer - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer...

RICOH SP 4510SF Printer - HTML Injection

Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Product Version: SP 4510SF Vulernability Type:...

RICOH SP 4510SF Printer HTML Injection

Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Product Version: SP 4510SF Vulernability Type:...

Open TFTP Server SP Buffer Overflow Vulnerability

Open TFTP Server SP is a file transfer server. A buffer overflow vulnerability exists in TFTP Server SP version 1.66 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2019:3386-1)

This update for shibboleth-sp fixes the following issues : Security issue fixed : CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

CVE-2018-10388

Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet...

CVE-2018-10387

CVE-2018-10387 refers to a heap-based overflow in the TFTP Server SP prior to 1.66. Public sources in the connected records describe a vulnerability where processing a long TFTP error packet can lead to remote denial of service and, potentially, arbitrary code execution. The Open TFTP Server SP 1...

CVE-2018-10387

Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161...

SUSE-SU-2019:3386-1 Security update for shibboleth-sp

This update for shibboleth-sp fixes the following issues: Security issue fixed: - CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471...

Null pointer dereference

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference...

PT-2019-14480 · Intesync · Intesync Solismed

Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

Improve cyber supply chain risk management with Microsoft Azure

For years, Microsoft has tracked threat actors exploiting federal cyber supply chain vulnerabilities. Supply chain attacks target software developers, systems integrators, and technology companies. Tactics often include obtaining source code, build processes, or update mechanisms to compromise...

CVE-2019-19191

CVE-2019-19191 affects Shibboleth Service Provider (SP) 3.x before 3.1.0. The vulnerability arises from a spec file that calls chown on files in a directory owned by the shibd service user, enabling local escalation to root via symlinks (e.g., /etc/shadow). Affected advisories indicate the fix is...

The vulnerability of the implementation of the interaction protocol between the “ARM Reliezer” software and the “Communication Server” software of the EKRASMS-SP software suite allows a perpetrator to exhaust the virtual memory available to it.

The vulnerability of the implementation of the interaction protocol between the “ARM Rielshchika” software and the “Server Connect” software of the EKRASMS-SP suite lies in the absence of restrictions on the size of the server list. Exploiting this vulnerability allows a malicious actor to exhaus...