SAP CAR Archive Tool Denial Of Service / Security Bypass
Core Security Technologies Advisory - SAP CAR archive tool suffers from security bypass and denial of service vulnerabilities.
View ArticleTP-LINK TDDP Buffer Overflow / Missing Authentication
Core Security Technologies Advisory - TP-LINK TDDP suffers from buffer overflow and missing authentication vulnerabilities.
View ArticleSAP SAPCAR 721.510 Buffer Overflow
Core Security Technologies Advisory - SAP distributes software and packages using an archive program called SAPCAR. This program uses a custom archive file format. A memory corruption vulnerability was...
View ArticleTrend Micro ServerProtect Disclosure / CSRF / XSS
Trend Micro ServerProtect suffers from information disclosure, manipulation, cross site request forgery, cross site scripting, and various other vulnerabilities.
View ArticleKaspersky Anti-Virus File Server 8.0.3.297 XSS / CSRF / Code Execution
Kaspersky Anti-Virus for Linux File Server version 8.0.3.297 suffers from remote code execution, cross site request forgery, cross site scripting, security bypass, information disclosure, and path...
View ArticleTrend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure
Trend Micro Smart Protection Server version 3.2 suffers from access control bypass, cross site scripting, information disclosure, and various other vulnerabilities.
View ArticleKaspersky Secure Mail Gateway 1.1.0.379 CSRF / Code Execution
Kaspersky Secure Mail Gateway version 1.1.0.379 suffers from code execution and cross site request forgery vulnerabilities.
View ArticleDell EMC Isilon OneFS XSS / Code Execution / CSRF
Dell EMC Isilon OneFS suffers from code execution, cross site request forgery, and cross site scripting vulnerabilities.
View ArticleTrend Micro Email Encryption Gateway XSS / Code Execution
Trend Micro Email Encryption Gateway suffers from cleartext transmission of sensitive information, missing authentication, cross site request forgery, cross site scripting, and various other...
View ArticleMikroTik RouterOS SMB Buffer Overflow
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain...
View ArticleTP-Link EAP Controller CSRF / Hard-Coded Key / XSS
TP-Link EAP suffers from hard-coded credential, cross site request forgery, cross site scripting, and other vulnerabilities.
View ArticleQuest DR Series Disk Backup Software 4.0.3 Code Execution
Quest DR Series Disk Backup Software version 4.0.3 suffers from multiple code execution vulnerabilities.
View ArticleQuest KACE System Management Appliance 8.0 (Build 8.0.318) XSS / Traversal /...
Quest KACE System Management Appliance version 8.0 (Build 8.0.318) suffers from code execution, cross site scripting, path traversal, remote SQL injection, and various other vulnerabilities.
View ArticleQNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection
QNAP Qcenter Virtual Appliance versions 1.6.1056 (20170825) and 1.6.1075 (20171123) suffer from information disclosure and command injection vulnerabilities.
View ArticleSoftNAS Cloud OS Command Injection
SoftNAS Cloud versions prior to 4.0.3 suffers from an OS command injection vulnerability.
View ArticleOpsview Monitor 5.x Command Execution
Opsview Monitor versions 5.2, 5.3, and 5.4 suffer from cross site scripting and multiple remote command execution vulnerabilities.
View ArticleD-Link Central WiFiManager Software Controller Code Execution / XSS
D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected.
View ArticleASRock Drivers Privilege Escalation / Code Execution
ASRock offers several utilities designed to give the user with an ASRock motherboard more control over certain settings and functions. These utilities include various features like the RGB LED control,...
View ArticleCisco WebEx Meetings Privilege Escalation
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow a local attacker to elevate privileges. This vulnerability is related to a previous security issue...
View ArticleASUS Driver Privilege Escalation
Multiple vulnerabilities were found in the GLCKIo and Asusgio drivers installed by ASUS Aura Sync, which could allow a local attacker to elevate privileges. ASUS Aura Sync versions 1.07.22 and below...
View ArticleGIGABYTE Driver Privilege Escalation
Multiple vulnerabilities were found in the GPCIDrv and GDrv drivers as bundled with several GIGABYTE and AORUS branded motherboard and graphics card utilities, which could allow a local attacker to...
View ArticleCisco WebEx Meetings Privilege Escalation
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow a local attacker to elevate privileges. Cisco Webex Meetings Desktop App versions 33.6.4.15, 33.6.5.2,...
View ArticleOpen-AudIT 3.2.2 Command Injection / SQL Injection
Open-AudIT version 3.2.2 suffers from OS command injection, arbitrary file upload, and remote SQL injection vulnerabilities.
View ArticleCipherMail Community Virtual Appliance 4.6.2 Code Execution
CipherMail Community Virtual Appliance version 4.6.2 suffers from remote command execution and file injection vulnerabilities.
View ArticlePydio Cells 2.0.4 XSS / File Write / Code Execution
Pydio Cells version 2.0.4 suffers from cross site scripting, file write, code execution, and various other vulnerabilities.
View Article
