619 matches found
UBUNTU-CVE-2019-10069
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly...
PT-2019-19927 · Unknown · Donation Plugin/Fundraising Platform
Name of the Vulnerable Software and Affected Versions: Donation Plugin and Fundraising Platform versions prior to 2.3.1 Description: The issue concerns a cross-site scripting XSS vulnerability in the csv export functionality of the wp-admin/edit.php page. Recommendations: For versions prior to...
PT-2018-15425 · Aqua Security +3 · Tcpreplay +3
Name of the Vulnerable Software and Affected Versions: Tcpreplay versions prior to 4.3.1 Description: The issue is a heap-based buffer over-read in the packet2tree function located in tree.c. This indicates a problem where more data is read from a buffer than it actually contains, potentially...
radare2 'r_bin_dyldcache_extract' function heap buffer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rbindyldcacheextract' function in the libr/bin/format/mach0/dyldcache.c file in radare2 versions prior to 3.1.1. An attacker can exploit this vulnerability to cause a denial ...
IBM Cloud Private Information Disclosure Vulnerability (CNVD-2018-26025)
IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A security vulnerability exists in IBM Cloud Private version 3.1.0, which stems from the program's failure to use a secure channel e.g., SSL to...
CVE-2018-18763
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...
TELEPORT Cross-Site Scripting Vulnerability
tp4a TELEPORT is a bastion system. The system supports hopping and management of RDP and SSH protocols. A cross-site scripting vulnerability exists in tp4a TELEPORT version 3.1.0, which stems from the program failing to properly handle specially crafted usernames. A remote attacker can exploit th...
CVE-2018-17918
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...
CVE-2018-15707
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things...
CVE-2018-12160
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...
CVE-2018-16147
The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting...
Philips IntelliSpace Cardiovascular and Xcelera Unknown Search Path or Element Vulnerability
Philips IntelliSpace Cardiovascular ISCV and Xcelera are both products of the Dutch company Philips.Philips ISCV is a cardiac imaging information management system.Xcelera is its predecessor. A security vulnerability exists in Philips ISCV version 3.1 and earlier and Xcelera version 4.1 and...
Apple iOS inkPresentation UI fraud vulnerability
Apple iOS is an operating system developed by Apple for its mobile devices.LinkPresentation is one of the presentation display components. A security vulnerability exists in the handling of URLs in the linkPresentation component in Apple iOS versions prior to 11.3.1. The vulnerability can be...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15887)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Duplicates" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15873)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setcompression method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15866)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "user update" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15875)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the registerDR2000v method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'LicenseServer',...
CVE-2018-11190
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 2 of 6...