Results
7,142 of 17,305· Page 78/143A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an au
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expect
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex
DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expect
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL inje
OX Guard 2.8.0 has CSRF.
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-age
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a
There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, diff
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, w
qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSess
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 a
In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack c
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /
In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating w
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file tha
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached clie
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handle
An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a u
An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on w
An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles
Linear eMerge E3-Series devices allow Privilege Escalation.
Linear eMerge E3-Series devices allow File Inclusion.
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) tha
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the admin
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-m
IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to ex
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databa
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo
Test your stack for 2019issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.