CVE-2016-4040

SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter...

Sql injection

SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-4040

CVE-2016-4040 affects dotCMS prior to version 3.3.2. A SQL injection in the Workflow Screen allows remote administrators to execute arbitrary SQL commands through the orderby parameter. Exploitation would impact data confidentiality, integrity, and availability as described by CVSS metrics (base ...

CVE-2016-4040

SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter...

PT-2016-5816

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.2 Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved via the orderby parameter in the Workflow Screen. Recommendations For versions prior to 3.3.2, update to...

CVE-2016-4040: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2015-7555

Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service program crash via crafted image and logical screen width fields in a GIF file...

Windows 10 Blue Screen of Death Gets QR Code

If you are a Microsoft’s Windows user, you may have encountered the infamous Blue Screen of Death BSOD. The Blue Screen of Death generally appears when Windows encounters any critical error due to software or hardware issues, displaying a sad face and no information other than "Your PC ran into a...

April 12, 2016 — KB3147458 (OS Build 10586.218)

None None...

CVE-2016-1177

The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2016-1177

The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2016-4624

Name of the Vulnerable Software and Affected Versions Falcon WisePoint versions 4.3.1 and earlier WisePoint Authenticator versions 4.1.19.22 and earlier Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors on the management screen. Recommendations...

WisePoint contains issue in preventing clickjacking attacks

Overview WisePoint contains an issue in the protection against clickjacking attacks on the management screen. Hiroki Ikemoto of NTT SOFT SERVICE Corp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user...

JVN#28480773: WisePoint contains issue in preventing clickjacking attacks

WisePoint contains an issue in the protection against clickjacking attacks on the management screen. Impact If a user views a malicious page while logged in, unintended operations may be conducted. Solution Update the Software Update to the latest version according to the information provided by...

Fire Screen - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fire Screen published at the 'play' market has multiple vulnerabilities...

Electric Screen Simulator Joke - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Electric Screen Simulator Joke published at the 'play' market has multiple vulnerabilities...

Electric screen X laser prank - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Electric screen X laser prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock Screen Prank - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock Screen Prank published at the 'play' market has multiple vulnerabilities...

Broken Screen - Crack Screen - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Broken Screen - Crack Screen published at the 'play' market has multiple vulnerabilities...

Electric Screen - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Electric Screen published at the 'play' market has multiple vulnerabilities...