5302 matches found
CVE-2016-10323: Undefined Security Weakness
Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophotodsmuser --copy-no-ea" command...
CVE-2016-10322: Improper Neutralization of Special Elements used in a Command
Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...
PT-2017-7860
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2958 Description The issue allows remote authenticated guest users to execute arbitrary commands. This can be achieved by using shell metacharacters in the X-Forwarded-For HTTP header to the...
PT-2017-7861
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2958 Description The issue allows local users to gain privileges. This is achieved by leveraging setuid execution of a command. The command in question is synophoto dsm user --copy-no-ea...
ICSMA-17-082-02_B. Braun Medical SpaceCom Open Redirect Vulnerability
OVERVIEW This advisory was originally posted to the NCCIC Portal on March 23, 2017, and is being released to the ICS-CERT web site. Marc Ruef and Rocco Gagliardi of scip AG have identified an open redirect vulnerability in B. Braun Medical’s SpaceCom module, which is integrated into the...
CVE-2016-2274
The CVE-2016-2274 issue affects the Adcon Telemetry A850 Telemetry Gateway Base Station web interface. The vulnerability is a Cross-Site Scripting (CWE-79) due to improper neutralization of user-controlled input before output, enabling injection of arbitrary JavaScript. Impact is described as pot...
CVE-2016-2274: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...
PT-2017-8040
Name of the Vulnerable Software and Affected Versions Adcon Telemetry A850 Telemetry Gateway Base Station affected versions not specified Description The issue is related to the Web Interface of the affected software, where it fails to properly neutralize user-controllable input. This could lead ...
About the security content of AirPort Base Station Firmware Update 7.6.7 and 7.7.7 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
CVE-2016-10115
NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or...
Adcon Telemetry A850 Telemetry Gateway Base Station Cross-Site Scripting Vulnerability
The Adcon Telemetry A850 Telemetry Gateway Base Station is a wireless telemetry system from Adcon Telemetry of Austria. A cross-site scripting vulnerability exists in the Adcon Telemetry A850 Telemetry Gateway Base Station. An attacker can exploit this vulnerability to inject arbitrary JavaScript...
CVE-2016-8561
A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...
Design/Logic Flaw
A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...
PT-2016-7501
Name of the Vulnerable Software and Affected Versions SIMATIC CP 1543-1 versions prior to V2.0.28 SIPLUS NET CP 1543-1 versions prior to V2.0.28 Description A vulnerability has been identified that could allow users with elevated privileges to TIA-Portal and project data on the engineering statio...
CVE-2016-8561: Undefined Security Weakness
A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...
xson built Station system news_detail.php parameters news_id SQL injection vulnerability
No description provided by source...
Legba Incorporated YateBTS Has a Design Vulnerability
Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A design vulnerability exists in Legba Incorporated YateBTS. Since the device is exposed to external connections, an attacker could exploit this vulnerability to compromise the BTS transceiver over the Internet. B...
Design Vulnerabilities in Range Networks OpenBTS/OpenBTS-UMTS
Range Networks OpenBTS/OpenBTS-UMTS is software for analog protocol stacks for GSM networks. A design vulnerability exists in Range Networks OpenBTS/OpenBTS-UMTS. Because the device is exposed to external connections, an attacker could exploit this vulnerability to compromise the BTS transceiver...
CVE-2016-5744: Exposure of Sensitive Information to an Unauthorized Actor
Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets...