6262 matches found
CVE-2016-9565
CVE-2016-9565 affects Nagios Core before 4.2.2 via MagpieRSS in the front-end component, allowing remote attackers to read or write arbitrary files by spoofing a crafted response from the Nagios RSS feed server; this follows an incomplete fix for CVE-2008-4796. Connected advisories indicate multi...
Open redirect
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...
CVE-2016-4045
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...
PT-2016-7779
Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 4.2.2 Description The issue allows remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. This is due to an incomplete fix for a previous issue...
SOL49160100 - Apache Tomcat vulnerability CVE-2016-6817
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
SOL49820145 - Apache Tomcat vulnerability CVE-2016-8735
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
SOL63326092 - NTP vulnerability CVE-2016-7434
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
SOL43167094 - Apache Struts 2 vulnerability CVE-2016-6795
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
WordPress Plugin Instagram Feed Cross-Site Request Forgery Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the Wordpress plugin Instagram Feed. An attacker exploiting the...
WordPress Instagram Feed 1.4.6.2 Plugin - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptingininstagramfeedpluginviacsrf.html Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF Abstract A persistent Cross-Site Scripting vulnerability was found in...
SOL68785753 - ImageMagick vulnerability CVE-2015-8898
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
SOL34224086 - MySQL vulnerability CVE-2016-5627
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
WordPress Instagram Feed Plugin <= 1.4.6.2 - Cross Site Request Forgery
Because of this vulnerability, attackers can perform a wide variety of actions, such as stealing Administrators' session tokens, or performing arbitrary actions on their behalf. Solution Update the plugin...
WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery
WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery !-- Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptingininstagramfeedpluginviacsrf.html Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF Abstract A persistent Cross-Site Scripting vulnerabili...
SOL41346123 - MySQL vulnerability CVE-2016-8287
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
SOL15922322 - MySQL vulnerability CVE-2016-8288
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery
!-- Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptingininstagramfeedpluginviacsrf.html Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF Abstract A persistent Cross-Site Scripting vulnerability was found in the Instagram Feed plugin. This issue allows an...
SOL13201415 - MySQL vulnerability CVE-2016-5616
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
SOL62477129 - MySQL vulnerability CVE-2016-5584
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
WordPress Instagram Feed 1.4.6.2 Cross Site Scripting / Cross Site Request Forgery
------------------------------------------------------------------------ Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...