1157 matches found
Atlassian JIRA Server ProfileLinkUserFormat Component Information Disclosure Vulnerability
Atlassian JIRA Server is a defect tracking management system from Atlassian Australia. The system is used to track and manage all kinds of issues and defects in the workplace.ProfileLinkUserFormat is one of the user information display components. An information disclosure vulnerability exists in...
bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service
A denial of service flaw was discovered in bind versions that include the "deny-answer-aliases" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition...
bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service
A denial of service flaw was discovered in bind versions that include the "deny-answer-aliases" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition...
Atlassian Confluence Questions Cross-Site Request Forgery Vulnerability (CNVD-2018-17881)
Atlassian Confluence Questions is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi's. The software enables collaboration and knowledge sharing among team members. A cross-site request forger...
Atlassian Confluence Questions Cross-Site Request Forgery Vulnerability
Atlassian Confluence Questions is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi's. The software enables collaboration and knowledge sharing among team members. A cross-site request forger...
CVE-2018-13394
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability...
UBUNTU-CVE-2018-5740
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, ...
Null pointer dereference
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service...
CVE-2017-15105: Improperly Implemented Security Check for Standard
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answer of an existing wildcard record, or trick unbound into accepting a NODATA proof...
CVE-2017-17871
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter...
Sql injection
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter...
CVE-2017-17871
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter...
CVE-2017-17871: Improper Neutralization of Special Elements used in an SQL Command
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter...
JEXTN Question And Answer extension SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions.JEXTN Question And Answer extension is used in one of the online question and answer plug-ins. A SQL injection vulnerability...
PT-2017-15060
Name of the Vulnerable Software and Affected Versions JEXTN Question And Answer extension version 3.1.0 Description The issue concerns SQL Injection, which can occur via the an parameter in a "view=tags" action or the ques-srch parameter. Recommendations For JEXTN Question And Answer extension...
JEXTN Question And Answer ,3.1.0,SQL Injection
JEXTN Question And Answer ,3.1.0,SQL Injection...
Joomla JEXTN Question And Answer 3.1.0 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link:...
Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection
Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection Exploit Title: Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link:...
Debian DSA-4063-1 : pdns-recursor - security update
Toshifumi Sakaguchi discovered that PowerDNS Recursor, a high-performance resolving name server was susceptible to denial of service via a crafted CNAME answer. The oldstable distribution jessie is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...