Design/Logic Flaw

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2019-13182

CVE-2019-13182 affects SolarWinds Serv-U FTP Server 15.1.7 Web UI. It is a stored XSS in the web UI, exploitable by manipulating fields like the user’s Full Name or HTTP Login Title Text, potentially allowing injected JavaScript to execute in a victim’s browser when logging in or accessing the lo...

CVE-2019-13181

CVE-2019-13181 affects SolarWinds Serv-U FTP Server v15.1.7 where the web UI allows CSV injection: table entries can contain a string that is evaluated by Excel as a DDE macro when exporting user data (privileged users can inject macros via description fields). The vulnerability stems from input ...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

Serv-U FTP Server 15.1.7 CSV Injection

Issue: CSV injection vulnerability CVE: CVE-2019-13181 Security researcher: Richard Tan @ The Missing Link Security Product name: Serv-U FTP Server Product version: Tested on 15.1.7 Fixed in: Serv-U 15.1.7 Hotfix 2 Overview The application allowed table entries to contain a string which could be...

Serv-U FTP Server Cross-Site Scripting Vulnerability

Serv-U is an award-winning FTP server software developed by Rob Beckers, full name: Serv-U FTP Server. FTP server users can share files on the internet through it using the FTP protocol. Serv-U FTP Server cross-site scripting vulnerability can be exploited by attackers to execute Javascript code...

Serv-U FTP Server CSV Injection Vulnerability

Serv-U is an award-winning FTP server software developed by Rob Beckers, full name: Serv-U FTP Server. FTP server users can share files on the internet through it using the FTP protocol. Serv-U FTP Server suffers from a CSV injection vulnerability that can be exploited by an attacker with the...

u-storage.com.mx Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting u-storage.com.mx website and its users. Following...

PT-2019-4482

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 1.1.1d OpenSSL versions 1.0.2 through 1.0.2t Description The issue is related to an overflow bug in the x64 64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are...

Security update for libidn2 (moderate)

openSUSE Security Update: Security update for libidn2 Announcement ID: openSUSE-SU-2019:2613-1 Rating: moderate References: 1154884 1154887 Cross-References: CVE-2019-12290 CVE-2019-18224 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2957-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

Amazon Kindle, Embedded Devices Open to Code-Execution

Multiple vulnerabilities have been found in Das U-Boot, a universal bootloader commonly used in embedded devices like Amazon Kindles, ARM Chromebooks and networking hardware. The bugs could allow attackers to gain full control of an impacted device’s CPU and modify anything they choose. Researche...

gd: Unsigned integer underflow _gdContributionsAlloc()

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

Critical Photon OS Security Update - PHSA-2019-3.0-0036

Updates of 'oniguruma', 'u-boot', 'etcd', 'systemd', 'gdb', 'sysstat', 'linux-aws', 'lua', 'polkit', 'linux', 'dbus', 'git', 'sqlite', 'linux-secure', 'linux-esx', 'rsyslog', 'python3', 'libgcrypt' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0036

Updates of 'sysstat', 'gdb', 'rsyslog', 'polkit', 'sqlite', 'dbus', 'python3', 'etcd', 'lua', 'u-boot', 'libgcrypt', 'git', 'linux-esx', 'systemd', 'linux', 'linux-secure', 'linux-aws', 'oniguruma' packages of Photon OS have been released...

UBUNTU-CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

dictionnaire1905.u-cergy.fr Cross Site Scripting vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting dictionnaire1905.u-cergy.fr website and its users...