Collaborate Disseminate
The QNAP Signage Station prior to version 2.0.1 and the accompanying iArtist Lite application contain multiple vulnerabilities. Continue reading VU#444472: QNAP Signage Station and iArtist Lite contain multiple vulnerabilities
Wireless keyboard and mouse devices from multiple vendors use proprietary wireless protocols that are not properly secured. Continue reading VU#981271: Multiple wireless keyboard/mouse devices use an unsafe proprietary wireless protocol
Flexera Software FlexNet Publisher,including all versions prior to 11.13.1.2,lmgrd and custom vendor daemon servers contain a buffer overflow vulnerability that may be leveraged to gain code execution. Continue reading VU#485744: Flexera Software FlexNet Publisher lmgrd contains a buffer overflow vulnerability
Swann network video recorder(NVR)devices contain a hard-coded password and do not require authentication to view the video feed when accessing from specific URLs. Continue reading VU#923388: Swann SRNVW-470 allows unauthorized access to video stream and contains a hard-coded password
Digital Video Recorders(DVRs),security cameras,and possibly other devices from multiple vendors use a firmware derived from Zhuhai RaySharp that contains a hard-coded root password. Continue reading VU#899080: Zhuhai Raysharp firmware for DVRs from multiple vendors contains hard-coded credentials
GNU glibc contains a buffer overflow vulnerability in the DNS resolver,which may allow a remote attacker to execute arbitrary code. Continue reading VU#457759: glibc vulnerable to stack buffer overflow in DNS resolver
Hirschmann"Classic Platform"switches contain a password sync feature that syncs the switch administrator password with the SNMP community password,exposing the administrator password to attackers on the local network. Continue reading VU#507216: Hirschmann "Classic Platform" switches reveal administrator password in SNMP community string by default
Cisco Adaptive Security Appliance(ASA)Internet Key Exchange versions 1 and 2(IKEv1 and IKEv2)contains a buffer overflow vulnerability that may be leveraged to gain remote code execution. Continue reading VU#327976: Cisco Adaptive Security Appliance (ASA) IKEv1 and IKEv2 contains a buffer overflow vulnerability
Comodo Chromodo browser,version 45.8.12.391,and possibly earlier,bundles the Ad Sanitizer extension,version 1.4.0.26,which disables the same origin policy,allowing for the possibility of cross-domain attacks by malicious or compromised web hosts. Chromodo is based on an outdated release of Chromium with known vulnerabilities. Continue reading VU#305096: Comodo Chromodo browser with Ad Sanitizer does not enforce same origin policy and is based on an outdated version of Chromium
Netgear Management System NMS300,version 1.5.0.11 and earlier,is vulnerable to arbitrary file upload,which may be leveraged by unauthenticated users to execute arbitrary code with SYSTEM privileges. A directory traversal vulnerability enables authenticated users to download arbitrary files. Continue reading VU#777024: Netgear Management System NMS300 contains arbitrary file upload and path traversal vulnerabilities