Security News

CVE-2018-10906

National Vulnerability Database - Tue, 07/24/2018 - 16:29
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
Categories: Security News

CVE-2018-11044

National Vulnerability Database - Tue, 07/24/2018 - 15:29
Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject content into an invite to another user, exploiting the trust implied by the source of the email.
Categories: Security News

CVE-2018-11047

National Vulnerability Database - Tue, 07/24/2018 - 15:29
Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. Refresh tokens by design have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. This affects the administrative endpoints of the UAA. i.e. /Users, /Groups, etc. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.
Categories: Security News

CVE-2018-11059

National Vulnerability Database - Tue, 07/24/2018 - 15:29
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Categories: Security News

CVE-2018-11060

National Vulnerability Database - Tue, 07/24/2018 - 15:29
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
Categories: Security News

CVE-2018-10628

National Vulnerability Database - Tue, 07/24/2018 - 14:29
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.
Categories: Security News

CVE-2018-10627

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product.
Categories: Security News

CVE-2018-10632

National Vulnerability Database - Tue, 07/24/2018 - 13:29
In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition.
Categories: Security News

CVE-2018-8851

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.
Categories: Security News

CVE-2018-8855

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.
Categories: Security News

CVE-2018-8859

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when specifying the directory to be accessed. This vulnerability does not affect the i.LON 600 product.
Categories: Security News

CVE-2018-14582

National Vulnerability Database - Tue, 07/24/2018 - 12:29
index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.
Categories: Security News

CVE-2018-14583

National Vulnerability Database - Tue, 07/24/2018 - 12:29
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.
Categories: Security News

CVE-2018-14584

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read.
Categories: Security News

CVE-2018-14585

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_Stz2Atom class.
Categories: Security News

CVE-2018-14586

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532.
Categories: Security News

CVE-2018-14587

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read.
Categories: Security News

CVE-2018-14588

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
Categories: Security News

CVE-2018-14589

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read.
Categories: Security News

CVE-2018-14590

National Vulnerability Database - Tue, 07/24/2018 - 12:29
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp.
Categories: Security News

Pages