35 matches found
PT-2019-11717 · Jenkins · Jenkins Gitlab Authentication Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins GitHub Authentication Plugin versions 0.31 and earlier Description: The issue concerns the management of the state parameter of OAuth to prevent CSRF. An attacker could catch the redirect URL provided during the authentication process...
Nortek Linear eMerge E3 Series Command Injection Vulnerability
Nortek Security & Control is a company that provides wireless security, home automation and personal security systems and devices. A command injection vulnerability exists in Nortek Linear eMerge E3 Series V0.32-07e and prior versions, which can be exploited by a remote attacker to execute...
Apache Qpid Broker-J Security Bypass Vulnerability
Apache Qpid is the United States Apache Apache Software Foundation developed an object-oriented messaging middleware , it is an AMQP Advanced Message Queuing Protocol implementation , you can communicate with AMQP-compliant systems , and provides a C++, Python, Java, C and other programming...
PT-2017-14151 · Apache · Apache Qpid Broker-J
Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 0.18 through 0.32 Description: The issue allows a remote unauthenticated attacker to trick the broker into using an authentication provider configured on a different port when connecting to an HTTP port. This...
Fedora 21 : qpid-cpp-0.32-4.fc21 (2015-9503)
Removed qpid-send and qpid-receive from qpid-cpp-client-devel. Include the qpid.tests module in python-qpid Bumped the release to force a build against Proton 0.9 in F22. Added qpidtoollibs to the qpid-tools package. Fixed path to qpid-ha in the systemd service descriptor. Resolves: BZ1186308 App...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the libuser-devel-0.32 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
CVE-2014-1425
CVE-2014-1425 concerns cgmanager 0.32, where improper nesting when modifying cgroup properties allows a local attacker within a privileged container to set cgroup values for all cgroups. The Ubuntu security notice USN-2451-1 documents the fix, updating cgmanager to versions 0.32-4ubuntu1.1 (14.10...
CVE-2014-3111
CVE-2014-3111 affects the FOG Imaging System (versions 0.27–0.32). The vulnerability is a multiple stored XSS impacting several management pages (Printer Management, Image Management, Storage Management, User Cleanup, Directory Cleaner). Vulnerable input points include fields like Printer Model, ...
WordPress Xerte Online 0.32 Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
WordPress Plugin Xerte Online - 'save.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/57098/info The Xerte Online plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution...
WordPress Plugin Xerte Online - save.php Arbitrary File Upload
WordPress Plugin Xerte Online - save.php Arbitrary File Upload source: https://www.securityfocus.com/bid/57098/info The Xerte Online plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the...
Directory traversal
Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors...
Fedora 7 : po4a-0.32-4.fc7 (2007-1763)
This update fixes a potential security problem information leak due to use of predictable name in /tmp. There is no CVE assignment yet Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...
