1121 matches found
CVE-2017-1000142
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation...
Apache Subversion 'libsvn_fs_fs/fs_fs.c' Denial of Service Vulnerability
Subversion is an open source multi-user version control system that supports non-ASCII text and binary data. A denial-of-service vulnerability exists in the libsvnfsfs/fsfs.c file in version 1.8.x of Apache Subversion prior to 1.8.2, which can be exploited by an authenticated, remote attacker to...
CVE-2013-4246
libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...
[SECURITY] [DLA 1113-1] ruby1.8 security update
Package : ruby1.8 Version : 1.8.7.358-7.1+deb7u4 CVE ID : CVE-2017-0898 CVE-2017-10784 Debian Bug : 875931 875936 Some vulnerabilities were found in the Ruby 1.8 package that affects the LTS distribution. CVE-2017-0898 Buffer underrun vulnerability in Kernel.sprintf CVE-2017-10784 Escape sequence...
DEBIAN-CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
SweetSecurity - Network Security Monitoring on Raspberry Pi type devices
Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. Getting Sweet Security Either download the Github repository manually, or clone the repo with the following command: $ git clone https://github.com/travisfsmith/sweetsecurity Prerequisites Mos...
vmail.geolives.com XSS vulnerability
Vulnerable URL: http://vmail.geolives.com/osticket/osTicket-1.8/file.php?key=xgybdv4t6t8j9eswlvnxfgsa9uxkjirm=1501804800=b2beec7f18008629cb8bbd1f7b3f0f61ea0c5402 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
RISE Ultimate Project Manager 'Messaging' Cross-Site Scripting Vulnerability
Rise Ultimate Project Manager is a web-based project management system with a messaging section. A cross-site scripting vulnerability exists in the Subject and Message fields of the Messaging section in Rise Ultimate Project Manager version 1.8. A remote attacker can exploit this vulnerability to...
RISE Ultimate Project Manager Cross-Site Scripting Vulnerability
Rise Ultimate Project Manager is a web-based project management system, of which the My Profile section is a profile module. A cross-site scripting vulnerability exists in the input field of the My Profile section in Rise Ultimate Project Manager version 1.8. A remote attacker can use this...
MailCore and MailCore 2 Denial of Service Vulnerabilities
MailCore is a framework developed and maintained by the MailCore team for handling the email protocols IMAP and SMTP.MailCore2 is the next generation of MailCore.LibEtPan is one of the mail libraries providing support for different types of mail access.MIMEhandlingcomponent is one of the...
WordPress Clean Login Cross Site Request Forgery Vulnerability
WordPress Clean Login plugin versions prior to 1.8 suffer from a cross site request forgery vulnerability. =============== Software Description =============== Software:clean login version: a a a a a a a a a ========= Mitigations ================ Disable the plugin until a new version is released...
CVE-2015-7565
Cross-site scripting XSS vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML...
CVE-2017-6606
A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known...
PYSEC-2017-10
A maliciously crafted URL to a Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 site using the django.views.static.serve view could redirect to any other domain, aka an open redirect vulnerability...
CVE-2017-7234
A maliciously crafted URL to a Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 site using the django.views.static.serve view could redirect to any other domain, aka an open redirect vulnerability...
UBUNTU-CVE-2017-7234
A maliciously crafted URL to a Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 site using the django.views.static.serve view could redirect to any other domain, aka an open redirect vulnerability...
CVE-2009-5147
DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names...
Transcend Firmware 1.8 CSRF / Brute Force
Hello list! All your photos and videos are belong to me. If they are on Transcend flash card :-. There are Predictable Resource Location, Brute Force and Cross-Site Request Forgery vulnerabilities in Transcend Wi-Fi SD Card. ------------------------- Affected products: -------------------------...