4892 matches found
Linux kernel OOPS null pointer reference vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the file s/xfs/libxfs/xfsattrleaf.c in Linux kernel version 4.17.3 and earlier. An attacker can exploit this vulnerability to cause...
ALPINE-CVE-2018-12892
An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or in some situations users may be able to write to supposedly read-only di...
Linux kernel denial of service vulnerability (CNVD-2018-15658)
Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. The ntfs.ko filesystem driver is one of the drivers that supports the NTFS filesystem. A denial of service vulnerability exists in the 'ntfsattrfind' function of the ntfs.ko...
aaugustin websockets denial of service vulnerability
aaugustin websockets is a library for building WebSocket servers and clients in Python. A security vulnerability exists in aaugustin websockets version 4. An attacker can exploit this vulnerability to cause a denial of service memory exhaustion...
File Upload Vulnerability in BEESCMS Enterprise Website Management System V4.0
BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in BEESCMS Enterprise Website Management System V4.0. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
CVE-2018-12635
CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs...
CirCarLife Scada Unauthorized Upgrade Vulnerability
Circontrol CirCarLife Scada is a parking lot automation system from Circontrol, Spain. A security vulnerability exists in Circontrol CirCarLife Scada version 4.2.4. The vulnerability can be exploited to disclose sensitive information by sending requests to the html/upgrade.html and...
NTP stack buffer overflow vulnerability (CNVD-2018-11915)
NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. ntpq and ntpdc are among the tools used to view the status of NTP operation. A stack buffer overflow vulnerability exists in ntpq and ntpdc in NTP version 4.2.8p11. The vulnerabili...
PublicCMS Path Traversal Vulnerability
PublicCMS is an open source content management system CMS written in Java. A directory traversal vulnerability exists in PublicCMS version 4.0.20180210. An attacker can read arbitrary files with the help of admin/cmsWebFile/list.html?path=... / URL to read arbitrary files...
Denial of Service Vulnerability in Quick Easy FTP Server
Quick Easy FTP Server is a small FTP server. A denial of service attack vulnerability exists in Quick Easy FTP Server version V4.0.0, which can be exploited to cause the program to crash when no PASV command is entered...
Linux kernel denial of service vulnerability (CNVD-2018-12155)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the net/socket.c file in Linux kernel versions 4.17.1 and earlier. An attacker could exploit this vulnerability to cause a null...
Ximdex cross-site scripting vulnerability (CNVD-2018-14422)
Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition, etc. The DMS component is one of the data management components. A cross-site scripting vulnerability exists in the /edit URI of...
Trovebox Insecure Password Reset Token Generation Vulnerability
Trovebox is an open source image sharing and management platform. user is one of the user components. A security vulnerability exists in the user component of Trovebox prior to version 4.0.0-rc6, which stems from the program failing to create a secure password reset token. An attacker can exploit...
Appnitro MachForm File Upload Vulnerability
Appnitro MachForm is a tool for creating responsive forms in web pages. A security vulnerability exists in Appnitro MachForm versions prior to 4.2.3. An attacker can exploit this vulnerability to bypass the file upload filter...
Node.js Denial of Service Vulnerability (CNVD-2018-14713)
Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...
Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15910)
The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via a local script to elevate privileges from web server user to root...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15873)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setcompression method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15887)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Duplicates" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15875)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the registerDR2000v method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'LicenseServer',...