WordPress TheCartPress 1.4.7 Code Execution / Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities

WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N ...

Unspecified Cross-Site Scripting Vulnerability in Zenphoto

Zenphoto is a free photo gallery content management system developed by the Zenphoto team. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in the image processor of Zenphoto versions prior to 1.4.7. A remote attacker can explo...

JVN#68452022: Zenphoto vulnerable to cross-site scripting

Zenphoto is a content management system CMS. Zenphoto contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing encoded user-supplied input. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libXfont package up to version 1.4.7 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pwlib-devel-1.4.7 package for the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libXfont-devel-1.4.7 package of the Red Hat Enterprise Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Fedora 20 : nginx-1.4.7-3.fc20 (2014-11415)

Security fix for CVE-2014-3616 - Create nginx-filesystem subpackage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Nginx SPDY缓冲区溢出漏洞

CVE ID:CVE-2014-0133 Nginx是HTTP及反向代理服务器，同时也用作邮件代理服务器，由Igor Sysoev编写。 nginx SPDY实现存在基于堆的缓冲区溢出，允许攻击者利用漏洞提交特殊的请求使应用程序崩溃或执行任意代码。 0 nginx 1.3.15 nginx 1.5.x nginx 1.5.12, 1.4.7版本已修复该漏洞，建议用户下载使用： http://www.manageengine.com/products/opstor/...

FreeBSD : nginx -- SPDY heap buffer overflow (fc28df92-b233-11e3-99ca-f0def16c5c1b)

The nginx project reports : A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution CVE-2014-0133. The problem...

[SECURITY] Fedora 19 Update: davfs2-1.4.7-3.fc19

davfs2 is a Linux file system driver that allows you to mount a WebDAV serv er as a disk drive...

DEBIAN-CVE-2013-4362

WEB-DAV Linux File System davfs2 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in 1 kernelinterface.c and 2 mountdavfs.c, related to the "system" function...

PT-2013-1124 · Davfs2 +1 · Davfs2 +1

Name of the Vulnerable Software and Affected Versions: davfs2 versions 1.4.6 through 1.4.7 Description: The issue allows local users to gain privileges via unknown attack vectors in files such as kernel interface.c and mount davfs.c, related to the system function. Multiple vulnerabilities in the...

wireshark: Heap-based buffer over-read in Visual Networks dissector

Integer underflow in the visualread function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service application crash via a malformed Visual Networks file that triggers a heap-based buffer over-read...

Wireshark Multiple Denial of Service Vulnerabilities June-11 (Mac OS X)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkmultdosvulnjun11macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities June-11 Mac OS X Authors: Rachana...

Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

PhpBB2 Module "Custom Mass PM" Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | alertdocument.cookie -------------------- ^ Vulnearble...

Wireshark ANSI A MAP Files Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharkansimapdosvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Wireshark ANSI A MAP Files Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyrigh...

UBUNTU-CVE-2011-2896

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...

Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharklucentascendfileparserdosvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability Windows Authors: Shashi...