PT-2020-8376

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

PT-2020-8377

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

CVE-2017-18829: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18830: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18822: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18826: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18837: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

EulerOS 2.0 SP3 : gd (EulerOS-SA-2020-1384)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of servic...

Privilege escalation

SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation...

PT-2019-13701

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.10.x through 7.10.19 SuiteCRM versions 7.11.x through 7.11.7 Description The issue allows for vertical privilege escalation. Recommendations For SuiteCRM versions 7.10.x through 7.10.19, update to version 7.10.20 or later...

CVE-2019-14454: Undefined Security Weakness

SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation...

Privilege escalation

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

CVE-2019-15953: Missing Authorization

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

Iomega and LenovoEMC NAS Vulnerability - US

Lenovo Security Advisory: LEN-25557 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6160, CVE-2019-6178 Summary Description: Update 2019-08-15: CVE-2019-6178: An information leakage vulnerability in Iomega and LenovoEMC NAS product...

Iomega and LenovoEMC NAS Vulnerability - Lenovo Support US

No description provided...

Verizon’s DBIR Highlights Key Drivers of Security Risk

It’s that time of the year when Verizon updates us on the latest trends in the global threat landscape with its Data Breach Investigations Report DBIR. The findings in this year’s report are based on data provided by more than 70 sources including Qualys about more than 41,000 security incidents,...

PT-2019-7192

Name of the Vulnerable Software and Affected Versions AxiomSL's Axiom java applet module versions 9.5.3 and earlier Description The issue allows remote attackers to access data of other basic users through arbitrary SQL commands, perform horizontal and vertical privilege escalation, cause a Denia...

Module Filter - Moderately critical - Cross site scripting - SA-CONTRIB-2019-042

This module enables you to filter the list of modules on the admin modules page, and organizes packages into vertical tabs. The module doesn't sufficiently escape HTML under the scenario leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that the...

Joomla JMultipleHotelReservation 6.0.7 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component J-MultipleHotelReservation 6.0.7 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link:...

Cacti cross-site scripting vulnerability (CNVD-2019-14551)

Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. A cross-site scripting vulnerability exists in the 'Vertical Label' field of the graphtemplates.php file in versions of Cacti prior to 1.2.0, which stems fro...