743 matches found
HNB 1.9 buffer overflow vulnerability
No description provided by source...
Apache OpenMeetings 1.9.x - 3.1.0 - ZIP File path Traversal
No description provided by source...
PT-2020-12509 · Freerdp +7 · Freerdp +7
Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 1.9 Description: The issue is an out-of-bounds read that can only be used to abort a session, with no possibility of data extraction. Recommendations: For FreeRDP versions 1.0 through 1.9, update to version 2.0.0 ...
Apache OpenMeetings Cross-Site Scripting Vulnerability
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A cross-site scripting vulnerability...
Apache OpenMeetings Password Disclosure Vulnerability
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A password disclosure vulnerability...
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...
Design/Logic Flaw
Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...
python2-django: permission bypass
If a ModelAdmin uses saveas=True not the default, the admin provides an option when editing objects to "Save as new". A regression in Django 1.9 prevented that form submission from raising a "Permission Denied" error for users without the "add" permission...
python-django: permission bypass
If a ModelAdmin uses saveas=True not the default, the admin provides an option when editing objects to "Save as new". A regression in Django 1.9 prevented that form submission from raising a "Permission Denied" error for users without the "add" permission...
CVE-2015-5259
Integer overflow in the readstring function in libsvnrasvn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read...
Wordpress Cool Video Gallery plugin command injection vulnerability
WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Cool Video Gallery is one of the video gallery plugin. A command injection vulnerability exists in Wordpress Cool Video Gallery plugin version 1.9 and earlier. An attacker can use this...
Amazon Linux: Security Advisory (ALAS-2014-439)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Yiqicms 存储型XSS
yiqicms 最新版的1.9 留言区，跟1.8版本一样存在相同的问题。在评论区中对标题仅仅限制了30个字符长度的限制，没有进行任何。 if!pregmatch"/^.1,30$/",$msgtitle ShowMsg"请输入正确的标题"; exit; if!pregmatch"/^.1,10$/",$msgname ShowMsg"请输入您的姓名"; exit; if!pregmatch"/^.1,20$/",$msgcontact ShowMsg"请输入正确的联系方式"; exit; if!pregmatch"/^.1,200$/",$msgcontent...
UBUNTU-CVE-2013-7397
Async Http Client aka AHC or async-http-client before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a...
CVE-2015-0764
Cisco Unified MeetingPlace 8.6(1.9) is affected by CVE-2015-0764, where an unauthenticated, remote attacker can read arbitrary files through a crafted resource request. The root cause is improper handling of resource requests by the affected device, enabling arbitrary file download. The vulnerabi...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The krb5-pkinit-openssl-1.9 package on the CentOS operating system has multiple vulnerabilities. Exploitation of these vulnerabilities can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The krb5-workstation-1.9 package has multiple vulnerabilities in the CentOS operating system. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...