1773 matches found
CVE-2019-15910: Improper Input Validation
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...
Denial of Service Vulnerability in DIGI PortServer TS 1 TCP Protocol
The PortServer TS series of terminal servers provide simple, reliable and cost-effective serial connections to the network. A denial of service vulnerability exists in the DIGI PortServer TS 1 TCP protocol. An attacker could exploit the vulnerability to launch a denial of service attack...
Denial of Service Vulnerability in DIGI PortServer TS 1
DIGI's PortServer TS serial server provides a simple, reliable and cost-effective solution for connecting multiple serial devices over industry-standard Ethernet. Target applications include retail/point-of-sale, building control and point-of-care. A denial of service vulnerability exists in...
QNAP Systems TS-870 File Upload Vulnerability
QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A file upload vulnerability exists in the QNAP Systems TS-870 using firmware version 4.3.4.0486, which can be exploited by an attacker to upload files to an arbitrary path...
QNAP Systems TS-870 Command Injection Vulnerability
The QNAP Systems TS-870 is a NAS device. A command injection vulnerability exists in the QNAP Systems TS-870 using firmware version 4.3.4.0486, which can be exploited by an attacker to execute illegal commands...
CVE-2019-16664
ThinkSAAS 2.91 is affected by CVE-2019-16664: an XSS via the parameter groupname in index.php?app=group&ac=create&ts=do. Root cause described across sources is insufficient sanitization of the groupname input, enabling cross-site scripting. Affected product/version: ThinkSAAS 2.91. The Red Hat ad...
PT-2019-14750
Name of the Vulnerable Software and Affected Versions ThinkSAAS version 2.91 Description An issue was discovered that allows for XSS via the index.php?app=group&ac=create&ts=do endpoint, specifically through the groupname parameter. Recommendations For ThinkSAAS version 2.91, consider restricting...
PT-2019-14751
Name of the Vulnerable Software and Affected Versions ThinkSAAS version 2.91 Description An issue was discovered where there is a potential for XSS via the content to the "index.php?app=group&ac=comment&ts=do&js=1" URI. This can be demonstrated by a crafted SVG document in the SRC attribute of an...
PT-2019-19661
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a missing bounds check in the SEC TS touch driver of the Android kernel, which could lead to a local information disclosure. This requires System execution...
ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)
mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: GHSA-FHJF-83WG-R2J9...
ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)
mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: OSV:GHSA-FHJF-83WG-R2J9...
ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)
mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: MEND:CVE-2019-10746...
Denial Of Service (DoS)
grpc-ts-health-check is vulnerable to denial of service DoS. The attack is possible as it does not protect its API endpoints, causing failure of service's health and thereby allowing Kubernetes to block traffic to services with a failing status...
Denial of Service
Overview Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing...
Exploit for CVE-2019-14339
CVE-2019-14339 Content Provider URI Injection on Canon PRINT...
ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)
mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: SNYK:JS-MIXINDEEP-450212...
Mitsubishi FX5-C32EYT/DSS-TS Digital I/O Module Detection
Binary data 751995.prm...
Mitsubishi QX80-TS Digital I/O Module Detection
Binary data 752037.prm...