88 matches found
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
OPENSUSE-SU-2019:1997-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
Security update for neovim (important)
openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1997-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update f...
OPENSUSE-SU-2019:1796-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
OPENSUSE-SU-2019:1759-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
marked marked.js file denial of service vulnerability
marked is a Markdown parser and compiler written in JavaScript. A denial of service vulnerability exists in the marked.js file in marked 0.3.7 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service server overload and crash with a maliciously crafted string...
Drake CMS 0.3.7 404.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
CVE-2010-4950
SQL injection vulnerability in the Event event extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1500
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file...
Default credentials
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file...
CVE-2011-1500
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file...
CVE-2011-1500
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file...
Fedora 13 : bareftp-0.3.7-1.fc13 (2010-18323)
Fri Nov 26 2010 Itamar Reis Peixoto - 0.3.7-1 - new version 0.3.7 - Wed Oct 27 2010 Paul F. Johnson - 0.3.6-1 - New version 0.3.6 - Build against mono-2.8 - Mon Apr 19 2010 Itamar Reis Peixoto - 0.3.2-1 - New Version 0.3.2 Note that Tenable Network Security has extracted the preceding description...
CVE-2009-2571
CVE-2009-2571 affects VerliAdmin versions 0.3.7 and 0.3.8. The issue is multiple cross-site scripting (XSS) vulnerabilities in index.php that allow remote attackers to inject arbitrary web script or HTML by supplying malicious input in (1) the URI, (2) the q parameter, (3) the nick parameter, or ...
Gentoo Security Advisory GLSA 200403-08 (oftpd)
The remote host is missing updates announced in advisory GLSA 200403-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200701-09 (oftpd)
The remote host is missing updates announced in advisory GLSA 200701-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Subversion 0.3.7/1.0.0 Remote Buffer Overflow Exploit
No description provided by source. / hoagiesubversion.c Remote exploit against Subversion-Servers. Author: greuff [email protected] Tested on Subversion 1.0.0 and 0.37 Algorithm: This is a two-stage exploit. The first stage overflows a buffer on the stack and leaves us 60 bytes of machine code to be...
Drake CMS 0.3.7 - '404.php' Local File Inclusion
source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 0.3.7 Beta is vulnerable;...
Drake CMS 0.3.7 - 404.php Local File Inclusion
Drake CMS 0.3.7 - 404.php Local File Inclusion source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...