PCI DSS v3.2 & Private IP Address Disclosure

Private IP addresses disclosure such as QID 86247 “Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability” will be marked as a Fail for PCI as of February 1, 2018 in accordance with PCI DSS v3.2. QID 86247 is a PCI Fail according to PCI DSS v3.2 Requirement 1.3.7: 1.3.7 Do...

VulnCheck KEV: CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

NfSen < 1.3.7 / AlienVault OSSIM < 5.3.6 - Local Privilege Escalation

Exploit Title: Local root exploit affecting NfSen = 1.3.7, AlienVault USM/OSSIM = 5.3.6 Version: NfSen 1.3.7 Version: AlienVault 5.3.6 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/ Vendor Homepage: http://www.alienvault.com/ Software Link:...

MantisBT < 1.3.7, 2.x < 2.2.1 XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

WordPress Calendar 1.3.7 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Scripting in Calendar WordPress Plugin ------------------------------------------------------------------------ Remco Vermeulen, July 2016...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cups-libs-1.3.7 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cups-libs-1.3.7 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Impress CMS 1.3.7 Open Redirect

Affected Vendor: http://www.impresscms.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: URL Redirection Tested on: Windows 7 Version : 1.3.7 Description: Impress CMS is susceptible to URL direction attack. When a malicious user sends a payload as...

Geeklog 1.3.7 users.php uid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/6602/info Geeklog is prone to a cross-site scripting vulnerability in the 'users.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a...

ComSndFTP Server 1.3.7 Beta Remote Format String Overflow

No description provided by source. Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status : Impact :...

rubygems security update

1.3.7-4 - Remove regexp backtracing CVE-2013-4363. - Related: rhbz1002838. 1.3.7-3 - Fix insecure connection to SSL repository CVE-2012-2125, CVE-2012-2126. - Related: rhbz1002838. 1.3.7-2 - Fix algorithmic complexity vulnerability CVE-2013-4287. - Resolves: rhbz1002838...

PT-2013-2150 · Rack +1 · Rack +1

Name of the Vulnerable Software and Affected Versions: Rack versions 1.3.x through 1.3.7 Rack versions 1.4.x through 1.4.2 Description: The issue allows remote attackers to cause a denial of service, resulting in memory consumption and an out-of-memory error. This is achieved by sending a long...

PT-2013-1897 · Rack +1 · Rack +1

Name of the Vulnerable Software and Affected Versions: Rack versions 1.1.3 and earlier Rack versions 1.2.x through 1.2.5 Rack versions 1.3.x through 1.3.6 Rack versions 1.4.x through 1.4.1 Description: The issue is caused by an incorrect regular expression in lib/rack/multipart.rb, which allows...

PT-2011-4602 · Cakephp · Cakephp

Name of the Vulnerable Software and Affected Versions: CakePHP version 1.3.7 Description: The issue allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain...

SFCB vulnerabilities

= Product overview SBLIM SFCB is an Open Source implementation of a WBEM CIM broker. WBEM is a set of technologies aimed to monitor and administer larges pools of computing ressources, applications, hardware. It's used by computers management tools like HP Systems Insight Manager, VMware vSphere ...

CVE-2010-0393

The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...

lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞

No description provided by source...

CVE-2009-3553

CVE-2009-3553 is a use-after-free vulnerability in CUPS’ cupsdDoSelect path (scheduler/select.c) affecting the CUPS daemon when listing many print jobs. The issue arises from improper reference-count maintenance, allowing a remote attacker to trigger a denial of service (daemon crash or hang) via...

Gentoo Security Advisory GLSA 200907-03 (apr-util)

The remote host is missing updates announced in advisory GLSA 200907-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora 11 : apr-util-1.3.7-1.fc11 (2009-6261)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...