2395 matches found
CVE-2018-19311
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
CVE-2018-19312
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
PT-2018-14913
Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x Description The issue allows SQL Injection via the searchVM parameter to the "/main.php?p=20408" API endpoint. Recommendations For Centreon versions 3.4.x, update to Centreon 18.10.0 or Centreon web 2.8.24 to resolve th...
PT-2018-14912
Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x through 18.09.x Description The issue allows for XSS via the Service field to the "main.php?p=20201" URI, as demonstrated by the "Monitoring Status Details Services" screen. Recommendations For Centreon versions 3.4.x...
CVE-2018-19311: Improper Neutralization of Input During Web Page Generation
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
CVE-2018-19312: Improper Neutralization of Special Elements used in an SQL Command
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
p-51headhunters.de XSS vulnerability
Open Bug Bounty ID: OBB-695843 Description| Value ---|--- Affected Website:| p-51headhunters.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...
PT-2018-14674
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer overflow exists in the vc1 decode p mb intfi function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav version...
p-supply.co.jp XSS vulnerability
Open Bug Bounty ID: OBB-688903 Description| Value ---|--- Affected Website:| p-supply.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
p-a-i.de XSS vulnerability
Open Bug Bounty ID: OBB-687687 Description| Value ---|--- Affected Website:| p-a-i.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the c3p0 gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLASS ...
d-p-a.nl XSS vulnerability
Open Bug Bounty ID: OBB-685594 Description| Value ---|--- Affected Website:| d-p-a.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
p-nintendo.com XSS vulnerability
Open Bug Bounty ID: OBB-683530 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
UBUNTU-CVE-2018-17985
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...
DEBIAN-CVE-2018-17985
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...
openSUSE Security Update : zsh (openSUSE-2018-1094)
This update for zsh to version 5.6.2 fixes the following issues : These security issues were fixed : - CVE-2018-0502: The beginning of a ! script file was mishandled, potentially leading to an execve call to a program named on the second line bsc1107296 - CVE-2018-13259: Shebang lines exceeding 6...
Dell EMC RSA Authentication Manager Operations Console Cross-Site Scripting Vulnerability
Dell EMC RSA Authentication Manager is a centralized suite of binary authentication software from Dell, Inc. that centralizes the management of binary authentication across physical sites. The software centralizes the management of binary identities, security tokens, methods, and users across...
OpenSSL: Information Disclosure Vulnerability (CVE-2016-7056) - Linux
OpenSSL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
