Fedora 30 : mosquitto (2019-cc896df591)

1.6.2 ===== Broker : - Fix memory access after free, leading to possible crash, when v5 client with Will message disconnects, where the Will message has as its first property one of content-type, correlation-data, payload-format-indicator, or response-topic. - Fix build for WITHTLS=no. - Fix Will...

CVE-2019-1000002

Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the attacker must get write access to "any"...

Improper access control

Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the attacker must get write access to "any"...

F5 Networks BIG-IP : Apache Portable Runtime vulnerability (K52319810)

When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...

Learning With Texts 1.6.2 SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

Learning with Texts 1.6.2 - 'start' SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

Remarkable Cross-Site Scripting Vulnerability

Remarkable is a Markdown a markup language parser. A cross-site scripting vulnerability exists in Remarkable 1.6.2 and earlier versions. A remote attacker can exploit this vulnerability to execute JavaScript code...

CVE-2017-16006

Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...

Design/Logic Flaw

Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...

Apache Portable Runtime Utility Denial of Service Vulnerability

Apache Portable Runtime APR, Apache Portable Runtime is the United States of America Apache Apache Software Foundation for the upper tier of the application to provide the underlying support for multiple operating system platforms across the use of the interface library. A security vulnerability...

PT-2017-4213 · Apache +4 · Apache Portable Runtime +4

Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime APR versions 1.6.2 and prior Description: The issue is related to the apr time exp and apr os exp time functions in the Apache Portable Runtime APR. When these functions are invoked with an invalid month field value, o...

svn-workbench Command Execution Vulnerability

svn-workbench is a svn version control system visualization tool . A security vulnerability exists in svn-workbench and previous versions 1.6.2. The vulnerability can be exploited to execute arbitrary code via the 'Command Shell' menu item...

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions...

PT-2017-7490 · Npm +1 · Index Server +1

Name of the Vulnerable Software and Affected Versions: serve-index versions 1.6.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted file or directory name. This is due to file and directory names not being escape...

Monsta FTP < 1.6.3 Multiple Vulnerabilities - Active Check

Monsta FTP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monstaftp:monstaftp";...

Polycom RealPresence CloudAXIS Suite Cross-Site Scripting Vulnerability

Polycom RealPresence CloudAXIS Suite is a cloud-based, cross-platform video collaboration solution from Polycom. The solution allows meeting schedules to be sent to contacts via email and calendar invitations. A cross-site scripting vulnerability exists in Polycom RealPresence CloudAXIS Suite 1.6...

PT-2015-6104

Name of the Vulnerable Software and Affected Versions Rack versions prior to 1.5.4 Rack versions 1.6.x prior to 1.6.2 Description The issue allows remote attackers to cause a denial of service, resulting in a SystemStackError, via a request with a large parameter depth. This affects products that...

WordPress BuddyPress Activity Plus 1.5 CSRF / File Deletion

Details ================ Software: BuddyPress Activity Plus Version: 1.5 Homepage: http://wordpress.org/plugins/buddypress-activity-plus/ Advisory report: https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/ CVE: Awaiting assignment CVSS: 8.5 High;...

rubygem-rails -- multiple vulnerabilities

Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and jquery-rails plugins and Rack 1.5.4 and 1.6.2...

WordPress Business Intelligence Lite SQL Injection Vulnerability

WordPress Business Intelligence Lite is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...