Design/Logic Flaw

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker ...

CVE-2018-19012

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker ...

CVE-2018-19012

The CVE-2018-19012 issue affects Dräger Infinity Delta, Delta XL, Kappa, and Infinity Explorer C700 (all versions). The root cause is improper privilege management in a dialog that allows breaking out of kiosk mode, enabling an attacker to reach the underlying OS and take control of the system. T...

PT-2019-9704

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all Description The issue allows an attacker to break out of the kiosk mode and reach the underlying operating...

PT-2019-9702

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all Description A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed...

PT-2019-9706

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all Description The issue allows log files to be accessed over an unauthenticated network connection. This access...

CVE-2018-19014: Insertion of Sensitive Information into Log File

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the...

CVE-2018-19012: Improper Privilege Management

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker ...

CVE-2018-19010: Improper Input Validation

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient...

Google Android Kernel Components Multiple Security Vulnerabilities

Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. A information-disclosure vulnerability Attackers can exploit these issues to gain elevated privileges and gain sensitive information. These issues are being tracked...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:2304-1) (Spectre)

This update for libvirt fixes the following issues: Security issue fixed : - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' bsc1092885. Bug fixes : - bsc1094325: Enable virsh blockresize for XEN guests...

TCExam Cross-Site Scripting Vulnerability (CNVD-2018-13449)

TCExam is a web-based open source online examination system for online test question generation, management and other aspects. A cross-site scripting vulnerability exists in versions of TCExam prior to 14.1.2. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

PT-2018-11817

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.1.2 Description The issue allows for XSS attacks via an ff or xl field. Recommendations For versions prior to 14.1.2, update to version 14.1.2 or later to resolve the issue...

Honeywell XL Web Controller - Cross-Site Scripting

Exploit Title: Honeywell XL Web Controller - Cross-Site Scripting Date: 2018-05-24 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C500 EXCEL WEB 300 I/O, XL1000C1000 EXCEL WEB 600 I/O,...

Honeywell XL Web Controller Cross Site Scripting / SQL Injection

Exploit Title: Honeywell XL Web Controller SQLi & XSS Date: 2018-05-24 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C500 EXCEL WEB 300 I/O, XL1000C1000 EXCEL WEB 600 I/O, XL1000C50U EXCE...

Honeywell XL Web Controller - Cross-Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: Honeywell XL Web Controller - Cross-Site Scripting Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C500 EXCEL WEB 300...

Honeywell XL Web Controller - Cross-Site Scripting

Honeywell XL Web Controller - Cross-Site Scripting Exploit Title: Honeywell XL Web Controller - Cross-Site Scripting Date: 2018-05-24 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C500...

UBUNTU-CVE-2018-7439

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...

CVE-2017-12238

A vulnerability in the Virtual Private LAN Service VPLS code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resulting in a denial of service DoS condition...

Google Android integer overflow vulnerability (CNVD-2017-16015)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone in Android on Pixel and Pixel XL devices. An attacker can exploit this...