Collaborate Disseminate
Commvault Edge,version 11 SP6(11.80.50.0),is vulnerable to a stack-based buffer overflow vulnerability. Continue reading VU#214283: Commvault Edge contains a buffer overflow vulnerability
The D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass of the remote login page,and do not sufficiently protect administrator credentials. Continue reading VU#553503: D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass and do not protect credentials
Apache Struts,versions 2.3.5 – 2.3.31 and 2.5 – 2.5.10,is vulnerable to code injection leading to remote code execution(RCE). Continue reading VU#834067: Apache Struts 2 is vulnerable to remote code execution
D-Link DIR-850L,firmware versions 1.14B07,2.07.B05,and possibly others,contains a stack-based buffer overflow vulnerability in the web administration interface HNAP service. Other models may also be affected. Continue reading VU#305448: D-Link DIR-850L web admin interface contains a stack-based buffer overflow vulnerability
D-Link DIR-850L,firmware versions 1.14B07,2.07.B05,and possibly others,contains a stack-based buffer overflow vulnerability in the web administration interface HNAP service. Other models may also be affected. Continue reading VU#305448: D-Link DIR-850L web admin interface contains a stack-based buffer overflow vulnerability
Flash Seats Mobile App for Android,version 1.7.9 and earlier,and for iOS,version 1.9.51 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#247016: Flash Seats Mobile App for Android and iOS fails to validate SSL certificates
PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting and unrestricted upload of dangerous file types. Continue reading VU#608591: PHP FormMail Generator generates code vulnerable to multiple issues
PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting and unrestricted upload of dangerous file types. Continue reading VU#608591: PHP FormMail Generator generates code vulnerable to multiple issues
According to the reporter,ACTi devices including D,B,I,and E series models using firmware version A1D-500-V6.11.31-AC are vulnerable to several issues. Continue reading VU#355151: ACTi cameras models from the D, B, I, and E series contain multiple security vulnerabilities
The dotCMS administration panel is vulnerable to cross-site request forgery,and the"Push Publishing"feature in Enterprise Pro is vulnerable to path traversal and arbitrary file upload. dotCMS versions 3.7.1 and earlier are affected. Continue reading VU#168699: dotCMS contains multiple vulnerabilities