CVE-2015-1369

Summary: CVE-2015-1369 is a SQL injection in Sequelize for Node.js, affecting versions up to and including 2.0.0-rc7 where user input placed in the order parameter can lead to arbitrary SQL execution. The issue is caused by unsafe handling of the order input, enabling attackers to influence queri...

Sitefinity Enterprise v7.2.53 - Persistent UI Vulnerability

Document Title: =============== Sitefinity Enterprise v7.2.53 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1369 Release Date: ============= 2015-01-06 Vulnerability Laboratory ID VL-ID: ===================================...

RHEL 5 / 6 : rhncfg (RHSA-2012:1369)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1369 advisory. Red Hat Network Tools provide programs and libraries that allow your system to use provisioning, monitoring, and configuration management...

APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5 Safari 6.1.5 and Safari 7.0.5 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.3 Impact...

CVE-2014-1369

WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site...

CVE-2014-1369

CVE-2014-1369 affects WebKit in Apple Safari prior to 6.1.5 and Safari 7.x prior to 7.0.5. The issue enables a user-assisted remote attacker to access local file:// URLs by dragging a URL from a crafted website to another window, i.e., a drag-operation driven disclosure vulnerability. The consoli...

Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.5 or 7.0.5. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0295-2)

Adobe Flash Player was updated to 11.2.202.270: bnc803485 - APSB13-05, CVE-2013-1372, CVE-2013-0645, CVE-2013-1373, CVE-2013-1369, CVE-2013-1370, CVE-2013-1366, CVE-2013-0649, CVE-2013-1365, CVE-2013-1374, CVE-2013-1368, CVE-2013-0642, CVE-2013-0644, CVE-2013-0647, CVE-2013-1367, CVE-2013-0639,...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8465)

This update for flash-player to version 11.2.202.270, tracked as ABSP13-05 , contains fixes for the following security issues : - Several buffer overflow vulnerabilities that could lead to code execution. CVE-2013-0642 / CVE-2013-0645 / CVE-2013-1365 / CVE-2013-1366 / CVE-2013-1367 / CVE-2013-136...

Flash Player <= 10.3.183.51 / 11.5.502.149 Multiple Vulnerabilities (APSB13-05)

Binary data 6688.prm...

Adobe Flash Player Multiple Vulnerabilities -02 Feb13 (Windows)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvuln02feb13win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities -02 Feb13 Windows Authors: Thanga Prakash S Copyright...

CVE-2013-1369

Technical details for CVE-2013-1369 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

Ubuntu 11.10 : thunderbird vulnerabilities (USN-1369-1)

Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Thunderbird can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, o...

CVE-2010-1369

CVE-2010-1369: SQL injection in signup.asp of Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL via the email parameter. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) and exploitable over network with low complexity and no authentication. Affect...

CVE-2009-1369

MoziloCMS 1.11 is affected by CVE-2009-1369. The vulnerability allows remote attackers to obtain sensitive information by triggering error messages through specific parameters: gal[] in gallery.php, page[] and cat[] in index.php, and file[] in download.php, which reveal the installation path. The...

CVE-2009-1369

creationtimestamp| type| source ---|---|--- 2009-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8394...

CVE-2008-1369

The CVE describes a misconfiguration in the Sun SPARC Enterprise T5120 and T5220 ships with a Solaris 10 image where /etc/default/login and /etc/ssh/sshd_config enable root logins in a way not intended by the vendor. This vulnerability allows remote attackers to gain privileges via unspecified ve...