HPESBHF04005 rev.1 - HPE Edgeline EL300 Converged Edge System Running HPE Integrated System Manager (iSM), Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System - Running HPE Edgeline Integrated System Manager Prior to 2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

IBM Data Risk Manager Vulnerabilities

Problem IBM customers running IBM Data Risk Manager version 2.0.1 and greater are advised to upgrade to the latest version of the product. IBM has provided a fix for a number of reported issues. See the Security Bulletin referenced below for details. Symptom Multiple vulnerabilities were reported...

CVE-2020-4429

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534...

Zabbix SIA Zabbix File Inclusion Vulnerability

Zabbix SIA Zabbix is an open source monitoring system from the Latvian company Zabbix SIA. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. Zabbix SIA A file inclusion vulnerability exists in Zabbix version 2.0.6 that stems from a failure to...

CVE-2018-16470

There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size...

WordPress WooCommerce Conversion Tracking plugin <=2.0.4 - Cross-Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF to XSS vulnerability found in WordPress WooCommerce Conversion Tracking plugin versions =2.0.4. Solution Update the WordPress WooCommerce Conversion Tracking plugin to the latest available version at least 2.0.6...

WordPress Photo Gallery – Image Gallery by Ape plugin <= 2.0.6 - Authenticated Arbitrary plugin deactivation

Authenticated Arbitrary plugin deactivation found by Jerome Bruandet in WordPress Photo Gallery – Image Gallery by Ape plugin versions = 2.0.6. Solution Update the WordPress Photo Gallery – Image Gallery by Ape plugin to the latest available version at least 2.0.7...

Code injection

A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct an HTTP request...

Fedora 31 : bird (2019-ff0f9ce167)

BIRD 2.0.6 2019-09-10 ======================= - RAdv: Solicited unicast RAs - BGP: Optional Adj-RIB-Out - BGP: Extended optional parameters length - Filter: Sets and set expressions in path masks - Several important bugfixes Note that Tenable Network Security has extracted the preceding descripti...

CVE-2019-16659

TuziCMS 2.0.6 has index.php/manage/link/doadd CSRF...

CVE-2019-16658

TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...

CVE-2019-16657

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

Code injection

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

Cross site request forgery (csrf)

TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...

Cross site request forgery (csrf)

TuziCMS 2.0.6 has index.php/manage/link/doadd CSRF...

CVE-2019-16657

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

CVE-2019-16658

TuziCMS 2.0.6 is affected by a CSRF vulnerability in the endpoint index.php/manage/notice/do_add . The provided documents identify the root cause as a CSRF issue at that endpoint. No exploitation specifics or remediation steps are given in the sources. If present, check for interim mitigations; o...

CVE-2019-16658

TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...

CVE-2019-16659

TuziCMS 2.0.6 has index.php/manage/link/doadd CSRF...

CVE-2019-16659

The connected sources confirm CVE-2019-16659 affects TuziCMS 2.0.6, describing a CSRF issue in index.php/manage/link/do_add. The root cause is a Cross-Site Request Forgery vulnerability in that endpoint, enabling unauthorized state-changing requests from a logged-in user. Exploit details, affecte...