Unified Office Total Connect Now℠ Cookie Parameter SQL Injection

1. Advisory Information Title: Unified Office Total Connect Now℠ Cookie Parameter SQL Injection Advisory ID: CORE-2022-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/unified-office-total-connect-sql-injection Date published: 2022-02-01 Date of last update: 2022-02-01 Vendors...

Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass

1. Advisory Information Title: Cisco AnyConnect Posture HostScan Security Service CVE-2021-1366 Bypass Advisory ID: CORE-2021-0002 Advisory URL: https://www.coresecurity.com/core-labs/advisories/cisco-anyconnect-posture-hostscan-security-service-bypass Date published: 2021-06-16 Date of last...

Cisco AnyConnect Posture (HostScan) Security Service Multiple Vulnerabilities

1. Advisory Information Title: Cisco AnyConnect Posture HostScan Security Service Multiple Vulnerabilities Advisory ID: CORE-2021-0001 Advisory URL: https://www.coresecurity.com/core-labs/advisories/cisco-anyconnect-posture-hostscan-security-service-local-privilege-escalation Retired Date...

MSI Ambient Link Multiple Vulnerabilities

1. Advisory Information Title: MSI Ambient Link Multiple Vulnerabilities Advisory ID: CORE-2020-0012 Advisory URL: https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities Date published: 2020-08-19 Date of last update: 2020-08-19 Vendors contacted: MSI Release...

: Parallels RAS OS Command Execution

1. Advisory Information Title : Parallels RAS OS Command Execution Advisory ID : CORE-2020-0011 Advisory URL:https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution Date published : 2020-07-23 Date of last update : 2020-07-21 Vendors contacted : Parallels Release mode...

: Pandora FMS Community Multiple Vulnerabilities

1. Advisory Information Title : Pandora FMS Community Multiple Vulnerabilities Advisory ID : CORE-2020-0010 Advisory URL : www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities Date published : 2020-06-09 Date of last update : 2020-06-09 Vendors contacted: Ártic...

: CipherMail Email Encryption Gateway Community Virtual Appliance Multiple Vulnerabilities

1. Advisory Information Title : CipherMail Email Encryption Gateway Community Virtual Appliance Multiple Vulnerabilities Advisory ID : CORE-2020-0008 Advisory URL : https://www.coresecurity.com/core-labs/advisories/ciphermail-multiple-vulnerabilities Date published : 2020-05-28 Date of last updat...

: Pydio Cells 2.04 Multiple Vulnerabilities

1. Advisory Information Title : Pydio Cells 2.04 Multiple Vulnerabilities Advisory ID : CORE-2020-0007 Advisory URL : https://www.coresecurity.com/core-labs/advisories/pydio-cells-204-multiple-vulnerabilities Date published : 2020-05-28 Date of last update : 2020-05-28 Vendors contacted : Pydio...

Open Redirect in OpenCart

Advisory ID Internal CORE-2020-0006 1. Advisory Information Title: Open Redirect in OpenCart Advisory ID: CORE-2020-0006 Advisory URL: https://www.coresecurity.com/advisories/open-redirect-opencart Date published: 2020-05-04 Date of last update: 2020-05-04 Vendors contacted: OpenCart Release mode...

Open-AudIT Multiple Vulnerabilities

Advisory ID Internal CORE-2020-0009 1. Advisory Information Title: Open-AudIT Multiple Vulnerabilities Advisory ID: CORE-2020-0009 Advisory URL: https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities Date published: 2020-04-27 Date of last update: 2020-04-24 Vendors...

Zulip account takeover via stored XSS

Advisory ID Internal CORE-2020-0002 1. Advisory Information Title: Zulip account takeover via stored XSS Advisory ID: CORE-2020-0002 Advisory URL: https://www.coresecurity.com/advisories/zulip-account-takeover-stored-xss Date published: 2020-04-02 Date of last update: 2020-03-27 Vendors contacted...

LogicalDoc Virtual Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2020-004 1. Advisory Information Title: LogicalDoc Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2020-004 Date published: 2020-03-18 Date of last update: 2020-03-17 Vendors contacted: LogicalDoc Release mode: Coordinated release 2. Vulnerability...

LogicalDoc Virtual Appliance Multiple Vulnerabilities

1. Advisory Information Title: LogicalDoc Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2019-004 Advisory URL: Date published: 2020-03-18 Date of last update: 2020-03-17 Vendors contacted: LogicalDoc Release mode: Coordinated release 2. Vulnerability Information Class: Unrestricted...

: GWTUpload XSS in the file upload functionality

Advisory ID Internal CORE-2020-0003 1. Advisory Information Title : GWTUpload XSS in the file upload functionality Advisory ID : CORE-2020-0003 Date published : 2020-03-04 Date of last update : 2020-03-04 Vendors contacted : Manuel Carrasco Moñino https://github.com/manolo/gwtupload Release mode ...

: Viper RGB Driver Multiple Vulnerabilities

1. Advisory Information Title : Viper RGB Driver Multiple Vulnerabilities Advisory ID : CORE-2020-0001 Advisory URL : https://www.coresecurity.com/core-labs/advisories/viper-rgb-driver-multiple-vulnerabilities Date published : 2020-02-17 Date of last update : 2020-02-14 Vendors contacted : Patrio...

D-Link Central WiFiManager Software Controller Multiple Vulnerabilities

1. Advisory Information Title: D-Link Central WiFiManager Software Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0010 Advisory URL:http://www.coresecurity.com/core-labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities Date published: 2018-10-04 Date...

Opsview Monitor Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0008 1. Advisory Information Title: Opsview Monitor Multiple Vulnerabilities Advisory ID: CORE-2018-0008 Advisory URL:https://www.coresecurity.com/core-labs/advisories/opsview-monitor-multiple-vulnerabilities Date published: 2018-09-04 Date of last update: 2018-09-0...

SoftNAS Cloud OS Command Injection

Advisory ID Internal CORE-2018-0009 1. Advisory Information Title: SoftNAS Cloud OS Command Injection Advisory ID: CORE-2018-0009 Advisory URL:https://www.coresecurity.com/core-labs/advisories/softnas-cloud-os-command-injection Date published: 2018-07-26 Date of last update: 2018-07-26 Vendors...

QNAP Q'center Virtual Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0006 1. Advisory Information Title: QNAP Q'center Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:https://www.coresecurity.com/core-labs/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities Date published: 2018-07-11...

Quest KACE System Management Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0004 1. Advisory Information Title: Quest KACE System Management Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0004 Advisory URL:https://www.coresecurity.com/core-labs/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities Date...

Quest DR Series Disk Backup Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0002 1. Advisory Information Title: Quest DR Series Disk Backup Multiple Vulnerabilities Advisory ID: CORE-2018-0002 Advisory URL:https://www.coresecurity.com/core-labs/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Date published: 2018-05-31 Date o...

TP-Link EAP Controller Multiple Vulnerabilities

1. Advisory Information Title: TP-Link EAP Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0001 Advisory URL:http://www.coresecurity.com/core-labs/advisories/tp-link-eap-controller-multiple-vulnerabilities Date published: 2018-05-03 Date of last update: 2018-05-03 Vendors contacted:...

MikroTik RouterOS SMB Buffer Overflow

Advisory ID Internal CORE-2018-0003 1. Advisory Information Title: MikroTik RouterOS SMB Buffer Overflow Advisory ID: CORE-2018-0003 Advisory URL:https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow Date published: 2018-03-15 Date of last update: 2018-03-15...

Trend Micro Email Encryption Gateway Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Email Encryption Gateway Multiple Vulnerabilities Advisory ID: CORE-2017-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Date published: 2018-02-21 Date of last update:...

Dell EMC Isilon OneFS Multiple Vulnerabilities

1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:https://www.coresecurity.com/core-labs/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities Date published: 2018-02-14 Date of last update: 2018-02-15 Vendors contacted: Del...

Kaspersky Secure Mail Gateway Multiple Vulnerabilities

Advisory ID Internal CORE-2017-0010 1. Advisory Information Title: Kaspersky Secure Mail Gateway Multiple Vulnerabilities Advisory ID: CORE-2017-0010 Date published: 2018-02-01 Date of last update: 2018-02-01 Vendors contacted: Kaspersky Lab Release mode: Coordinated release 2. Vulnerability...

Trend Micro Smart Protection Server Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date published: 2017-12-19 Date of last update:...

SAP Note Assistant Insecure handling of SAP Notes signature vulnerability

Advisory ID Internal CORE-2017-0011 1. Advisory Information Title: SAP Note Assistant Insecure handling of SAP Notes signature vulnerability Advisory ID: CORE-2017-0011 Advisory...

Trend Micro ScanMail for Microsoft Exchange Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro ScanMail for Microsoft Exchange Multiple Vulnerabilities Advisory ID: CORE-2017-0007 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-scanmail-for-microsoft-exchange-multiple-vulnerabilities Date published: 2017-10-26 Date of...

Trend Micro Smart Protection OS Command Injection

1. Advisory Information Title: Trend Micro Smart Protection OS Command Injection Advisory ID: CORE-2017-0004 Advisory URL:http://www.coresecurity.com/core-labs/advisories/trend-micro-smart-protection-os-command-injection Date published: 2017-08-23 Date of last update: 2017-08-23 Vendors contacted...

Trend Micro Deep Discovery Director Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Deep Discovery Director Multiple Vulnerabilities Advisory ID: CORE-2017-0005 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities Date published: 2017-07-12 Date of last update:...

Kaspersky Anti-Virus File Server Multiple Vulnerabilities

Advisory ID Internal CORE-2017-0003 1. Advisory Information Title: Kaspersky Anti-Virus File Server Multiple Vulnerabilities Advisory ID: CORE-2017-0003 Date published: 2017-06-28 Date of last update: 2017-06-28 Vendors contacted: Kaspersky Release mode: Forced release 2. Vulnerability...

Trend Micro ServerProtect Multiple Vulnerabilities

Advisory ID Internal CORE-2017-0002 1. Advisory Information Title: Trend Micro ServerProtect Multiple Vulnerabilities Advisory ID: CORE-2017-0002 Advisory URL:https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities Date published: 2017-05-23 Date of last update:...

SAP SAPCAR Heap Based Buffer Overflow Vulnerability

Advisory ID Internal CORE-2017-0001 1. Advisory Information Title: SAP SAPCAR Heap Based Buffer Overflow Vulnerability Advisory ID: CORE-2017-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability Date published: 2017-05-10 Date of...

TP-LINK TDDP Multiple Vulnerabilities

1. Advisory Information Title: TP-LINK TDDP Multiple Vulnerabilities Advisory ID: CORE-2016-0007 Advisory URL:https://www.coresecurity.com/core-labs/advisories/tp-link-tddp-multiple-vulnerabilities Date published: 2016-11-21 Date of last update: 2016-11-18 Vendors contacted: TP-Link Release mode:...

SAP CAR Multiple Vulnerabilities

Advisory ID Internal CORE-2016-0006 1. Advisory Information Title: SAP CAR Multiple Vulnerabilities Advisory ID: CORE-2016-0006 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sap-car-multiple-vulnerabilities Date published: 2016-08-10 Date of last update: 2016-08-10 Vendors...

NetMeeting Directory Traversal Vulnerability

Advisory Information: Advisory ID: CORE-2003-0305-04 Bugtraq ID: 7931 CVE Name: None currently assigned. Title: NetMeeting Directory Traversal Vulnerability Class : Input validation error Remotely Exploitable: Yes Locally Exploitable: No Vendors Contacted: Microsoft Core Notification: 2003-05-21...

FreeBSD Kernel amd64_set_ldt Heap Overflow

1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: Date published: 2016-03-16 Date of last update: 2016-03-14 Vendors contacted: FreeBSD Release mode: Coordinated release 2. Vulnerability Information Class: Unsigned to Signed...

Samsung SW Update Tool MiTM

1. Advisory Information Title: Samsung SW Update Tool MiTM Advisory ID: CORE-2016-0003 Advisory URL: Date published: 2016-03-09 Date of last update: 2016-03-04 Vendors contacted: Samsung Release mode: Coordinated release 2. Vulnerability Information Class: Cleartext Transmission of Sensitive...

SAP Download Manager Password Weak Encryption

1. Advisory Information Title: SAP Download Manager Password Weak Encryption Advisory ID: CORE-2016-0004 Advisory URL: Date published: 2016-03-09 Date of last update: 2016-03-07 Vendors contacted: SAP Release mode: Coordinated release 2. Vulnerability Information Class: Storing Passwords in a...

Lenovo ShareIT Multiple Vulnerabilities

Advisory ID Internal CORE-2016-0002 1. Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode: Coordinated release 2. Vulnerability Information Class: Use of...

Intel Driver Update Utility MiTM

1. Advisory Information Title: Intel Driver Update Utility MiTM Advisory ID: CORE-2016-0001 Date published: 2016-01-19 Date of last update: 2016-01-14 Vendors contacted: Intel Release mode: Coordinated release 2. Vulnerability Information Class: Cleartext Transmission of Sensitive Information...

Microsoft Windows Media Center link file incorrectly resolved reference

1. Advisory Information Title: Microsoft Windows Media Center link file incorrectly resolved reference Advisory ID: CORE-2015-0014 Advisory URL: Date published: 2015-12-08 Date of last update: 2015-12-04 Vendors contacted: Microsoft Release mode: Coordinated release 2. Vulnerability Information...

FortiClient Antivirus Multiple Vulnerabilities

None...

AirLink101 SkyIPCam1620W OS Command Injection

Advisory ID Internal CORE-2015-0011 1. Advisory Information Title: AirLink101 SkyIPCam1620W OS Command Injection Advisory ID: CORE-2015-0011 Advisory URL:https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection Date published: 2015-07-08 Date of last update: 2015-07-0...

AirLive Multiple Products OS Command Injection

1. Advisory Information Title: AirLive Multiple Products OS Command Injection Advisory ID: CORE-2015-0012 Advisory URL: http://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection Date published: 2015-07-06 Date of last update: 2015-07-06 Vendors contacted: AirLive...

Sendio ESP Information Disclosure Vulnerability

1. Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio Release mode: Coordinated release 2. Vulnerability Information Class: OWASP Top Ten 2013...

SAP LZC/LZH Compression Multiple Vulnerabilities

Advisory ID Internal CORE-2015-0009 1. Advisory Information Title: SAP LZC/LZH Compression Multiple Vulnerabilities Advisory ID: CORE-2015-0009 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sap-lzc-lzh-compression-multiple-vulnerabilities Date published: 2015-05-12 Date of last...

InFocus IN3128HD Projector Multiple Vulnerabilities

Advisory ID Internal CORE-2015-0008 1. Advisory Information Title: InFocus IN3128HD Projector Multiple Vulnerabilities Advisory ID: CORE-2015-0008 Date published: 2015-04-27 Date of last update: 2015-04-22 Vendors contacted: InFocus Release mode: User release 2. Vulnerability Information Class:...

Schneider Vampset Stack and Heap Buffer Overflow

Advisory ID Internal CORE-2015-0007 1. Advisory Information Title: Schneider Vampset Stack and Heap Buffer Overflow Advisory ID: CORE-2015-0007 Advisory URL:https://www.coresecurity.com/core-labs/advisories/schneider-vampset-stack-and-heap-buffer-overflow Date published: 2015-03-30 Date of last...