4724 matches found
Monxin Netcom Mall System v4.0 Exists Arbitrary File Upload Vulnerability
Monxin all-network mall system is a mall management system based on PC mall + cell phone mall + WeChat mall + offline cashier, members / orders / commodities / inventory online and offline real-time synchronization of data across the network. Monxin v4.0 there are arbitrary file upload...
Pluck Remote PHP Code Execution Vulnerability
pluk is a simple content management system CMS written in PHP. A security vulnerability exists in versions prior to pluck 4.7.6. A remote attacker can exploit the vulnerability to execute PHP code...
IDM Denial of Service Vulnerability
NetIQ IDM also known as NetIQ Identity Manager is the United States NetIQ company's set of solutions to provide authentication and control access. Identity Applications is one of the authentication applications. Bi-directional driver is one of the two-way driver. A security vulnerability exists i...
Linux kernel 'etm_setup_aux' function denial-of-service vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'etmsetupaux' function in the drivers/hwtracing/coresight/coresight-etm-perf.c file in versions of the Linux kernel prior to...
Linux kernel denial of service vulnerability (CNVD-2018-10796)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'dccpwritexmit' function in the net/dccp/output.c file in versions of Linux kernel prior to 4.16-rc7. A local attacker can explo...
PT-2018-5636 · Moxa · Moxa Edr-810
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA CFG.ini" without a cookie header,...
UBUNTU-CVE-2018-10963
The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...
DEBIAN-CVE-2018-10471
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...
Atlassian Fisheye and Crucible Cross-Site Scripting Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in the handling of response packet headers in...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08585)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the content management feature of WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability to injec...
Google Android Security Bypass Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Device Administrator code in versions prior to Android 4.4.1r1, which stems from the program's failure to update the mAdminMap data structur...
Contec Smart Home Unauthorized Password Reset Vulnerability
Contec Smart Home is a smart home management system for managing connected smart home devices. A security vulnerability exists in Contec Smart Home version 4.15, which stems from the program failing to require authentication for the newuser.php, edituser.php, deleteuser.php, and user.php files. A...
Omron CX-One Code Execution Cave
Omron CX-One is an integrated toolkit from Omron Corporation of Japan Omron, which includes software for networking, PTs, inverters, temperature controllers, and PLC programming, etc. CX-FLnet, etc. are applications that are integrated into it. A security vulnerability exists in several pieces of...
tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...
tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...
tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...