CVE-2018-15768 Insecure MySQL Configuration Vulnerability

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

Design/Logic Flaw

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...

CVE-2018-15768: Incorrect Permission Assignment for Critical Resource

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

CVE-2018-15796

Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage...

Code injection

Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage...

CVE-2018-15796: Inadequate Encryption Strength

Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage...

PT-2018-13212

Name of the Vulnerable Software and Affected Versions Cloud Foundry Bits Service versions prior to 2.14.0 Description The issue concerns the use of an insecure hashing algorithm to sign URLs, which could allow a remote malicious user to obtain a signed URL, extract the signing key, and gain...

CVE-2018-15444 Cisco Energy Management Suite XML External Entity Vulnerability

A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entri...

UBUNTU-CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

Code injection

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

PT-2018-14807 · Librecad +3 · Librecad +3

Name of the Vulnerable Software and Affected Versions: LibreCAD version 2.1.3 Description: The issue allows remote attackers to cause a denial of service, resulting in a 0x89C04589 write access violation and application crash, or possibly have other unspecified impacts via a crafted file...

CVE-2018-15444: Improper Restriction of XML External Entity Reference

A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entri...

Design/Logic Flaw

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName,...

PT-2018-1859

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite Software affected versions not specified Description The issue is related to the improper handling of XML External Entity XXE entries when parsing certain XML files in the web-based user interface. This could allo...

CVE-2018-15796: Signing Key Extraction in Bits Service | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using bits-service-release versions prior to 2.14.0 Description Cloud Foundry Bits Service, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may...

CVE-2018-11062

Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default...

CVE-2018-11062: Use of Hard-coded Credentials

Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default...

ALPINE-CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

DEBIAN-CVE-2018-12385

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally...