11636 matches found
WordPress Satoshi 2.0 Cross Site Request Forgery / File Upload
Exploit Title : WordPress Satoshi Themes 2.0 CSRF Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/06/2019 Vendor Homepage : vooshthemes.com - tecnoge.com - netsons.com WordPress Affected Versions : 4.7.13 - 3.4.2 Theme Affected Version :...
EulerOS 2.0 SP5 : java-1.7.0-openjdk (EulerOS-SA-2019-1584)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Improper field access checks CVE-2018-3169 - OpenJDK: Font layout engine out of bounds access setCurrGlyphID CVE-2019-2698...
EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1599)
According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: Spoofing of XDGSEAT allows for actions to be checked against 'allowactive' instead of 'allowany'.CVE-2019-3842 Note that Tenable Network...
EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2019-1585)
According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Font layout engine out of bounds access setCurrGlyphID CVE-2019-2698 - OpenJDK: Slow conversion of BigDecimal to long...
EulerOS 2.0 SP5 : python-urllib3 (EulerOS-SA-2019-1596)
According to the version of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS stor...
EulerOS 2.0 SP5 : ruby (EulerOS-SA-2019-1597)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8324 - rubygems: Escape sequence injection vulnerability in gem...
EulerOS 2.0 SP3 : python (EulerOS-SA-2019-1594)
According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509...
EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2019-1569)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty...
EulerOS 2.0 SP2 : gstreamer-plugins-base (EulerOS-SA-2019-1577)
According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...
EulerOS 2.0 SP2 : bash (EulerOS-SA-2019-1563)
According to the version of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the...
EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2019-1590)
According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of...
EulerOS 2.0 SP3 : httpd (EulerOS-SA-2019-1580)
According to the version of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A race condition was found in modauthdigest when the web server was running in a threaded MPM configuration. It could allow a user with valid...
Photon OS 2.0: Libpng PHSA-2019-2.0-0160
An update of the libpng package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12539...
Photon OS 2.0: Snappy PHSA-2019-2.0-0160
An update of the snappy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12539...
Photon OS 2.0: Linux PHSA-2019-2.0-0160
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid125396...
Photon OS 2.0: Mercurial PHSA-2019-2.0-0160
An update of the mercurial package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Petraware pTransformer ADC < 2.1.7.22827 - Login Bypass Vulnerability
Exploit Title: Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form. Date: 28-05-2019 Exploit Author: Faudhzan Rahman Website: https://faudhzanrahman.blogspot.com/ Vendor Homepage: http://www.petraware.com Version: 2.0 CVE : CVE-2019-12372...
Photon OS 2.0: Keepalived PHSA-2019-2.0-0160
An update of the keepalived package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-4X49-W62V-76Q7 Path Traversal in Spring Cloud Config
Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a...
