627 matches found
CVE-2017-7480
CVE-2017-7480 affects rkhunter = 1.4.4 (or apply vendor-provided fixes/patches) to disable insecure behavior and ensure updates are performed securely. Exploit details and active exploitation status are not provided in the supplied documents.
SoftBank PrimeDrive Desktop Application Code Execution Vulnerability
SoftBank PrimeDrive Desktop Application is a set of client applications from SoftBank Japan that provide online storage services for PrimeDrive. A security vulnerability exists in SoftBank PrimeDrive Desktop Application 1.4.4 and earlier versions. An attacker can exploit the vulnerability to...
CVE-2017-2167
Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory...
VulnCheck KEV: CVE-2008-2990
PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...
Multiple vulnerabilities in TYPO3 Ajax mail subscription extension
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Ajax mail subscription is one of the plugins to add a subscription to an email newsletter. Authentication bypass vulnerabilities and security bypass vulnerabilities exist...
Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
ownCloud: owncloud.com: WP Super Cache plugin is outdated
I know it might be out of scope, but I report it to be sure https://owncloud.org/wp-content/plugins/wp-super-cache/readme.txt shows version 1.4.4 and this version is prone to XSS and PHP Object injection http://z9.io/2015/09/25/wp-super-cache-1-4-5/...
h2o -- directory traversal vulnerability
Yakuzo reports: H2O up to version 1.4.4 / 1.5.0-beta1 contains a flaw in its URL normalization logic. When file.dir directive is used, this flaw allows a remote attacker to retrieve arbitrary files that exist outside the directory specified by the directive. H2O version 1.4.5 and version...
Auberge Theme <= 1.4.4 - DOM Cross-Site Scripting (XSS)
The Auberge WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/themes/auberge/genericons/example.html...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-devel-1.4.4 package in the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-1.4.4 package in the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sblim-cmpi-fsvol-devel-1.4.4 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sblim-cmpi-fsvol-test-1.4.4 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
The vulnerability of the CentOS operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-1.4.4 package in the CentOS operating system can lead to a violation of the confidentiality of protected information. Exploiting this vulnerability can be carried out locally...
The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sblim-cmpi-fsvol-test-1.4.4 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploiting this vulnerability can be carried out locally...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the integrity of protected information.
The vulnerability of the gnutls package up to version 1.4.4 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited remotely...
Beehive Forum Cross-Site Scripting Vulnerability
Beehive Forum is a set of Web forum software based on PHP and MySQL. The software provides text filtering, user rights management and e-mail notification. A cross-site scripting vulnerability exists in the editprefs.php script in Beehive Forum version 1.4.4, which stems from the program's failure...
CVE-2015-2198
The CVE-2015-2198 entry concerns Beehive Forum 1.4.4, where multiple XSS vulnerabilities exist in edit_prefs.php. The flaw stems from how the parameters homepage_url, pic_url, and avatar_url are handled inside error messages, allowing remote attackers to inject arbitrary script/HTML. Red Hat and ...
foreman: XSS in key name auto-completion
Cross-site scripting XSS vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name...
