Django < 2.16 Uncontrolled Memory Consumption Vulnerability - Linux

Django is prone to an uncontrolled memory consumption vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...

CVE-2019-8954

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...

CVE-2019-8954

Indexhibit 2.1.5 is affected by CVE-2019-8954. The vulnerability allows remote attackers to execute arbitrary code via the v parameter (used with the id parameter) in an upd_jxcode=true action to the ndxzstudio/?a=system URI. Several connected documents corroborate code execution impact on affect...

[ASA-201901-6] python-django: content spoofing

Arch Linux Security Advisory ASA-201901-6 ========================================= Severity: Medium Date : 2019-01-11 CVE-ID : CVE-2019-3498 Package : python-django Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-839 Summary ======= The package python-django before...

Security Bulletin: Onyx link security (PO07142)

Summary Links that have the same access levels as their ends, but receive them through different security settings, are not returned correctly in search results. This can result in search results being incorrectly removed. Vulnerability Details This issue affects systems that use IBM i2 Analyze...

pfSense < 2.1.5 Multiple Vulnerabilities ( SA-14_14 )

According to its self-reported version number, the remote pfSense install is a version prior to 2.1.5 It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108516; scriptversion"1.4";...

Vanilla 2.1.5 - Cross-Site Request Forgery

Vanilla 2.1.5 - Cross-Site Request Forgery Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432 Google Dork: NA Date: 7/1/2018 Contact: https://twitter.com/anandm47 website: https://anandtechzone.blogspot.in Exploit Author: Anand Meyyappan Vendor Homepage:...

Vanilla Forums Cross-Site Request Forgery Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . A cross-site request forgery vulnerability exists in versions of Vanilla Forums prior to 2.1.5. A remote attacker can exploit this vulnerability to delete topics and comments on the forum...

jqueryFileTree directory traversal vulnerability

jqueryFileTree is a configurable AJAX file browser plugin with jQuery . A directory traversal vulnerability exists in jqueryFileTree 2.1.5 and earlier versions. No detailed vulnerability details are provided at this time...

Directory traversal

jqueryFileTree 2.1.5 and older Directory Traversal...

CVE-2017-1000170

CVE-2017-1000170 affects the WordPress Delightful Downloads plugin’s jqueryFileTree 2.1.5 and older. The connected documents describe a directory traversal/local file inclusion vulnerability in jqueryFileTree, allowing an attacker to include arbitrary local files via the jqueryFileTree.php connec...

Joomla! Component SIMGenealogy 2.1.5 - SQL Injection

Joomla! Component SIMGenealogy 2.1.5 - SQL Injection Exploit Title: Joomla! Component SIMGenealogy v2.1.5 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : https://www.simbunch.com/ Software: https://extensions.joomla.org/extensions/extension/clients-a-communities/communities/simgenealogy/ Demo...

CVE-2017-3590

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...

VLC Media Player 'audio.c' Heap-Based Buffer Overflow Vulnerability - Mac OS X

VLC media player is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

UBUNTU-CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation.

NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation. WMS5316 ProSafe 16AP Wireless Management System - Firmware 2.1.4.15 Build 1236. - Vulnerability Information: ============================== Title: NETGEAR Wireless Management System - Authentication Bypass and...

JB Library [jblibrary], 2.1.5 and below, XSS (Cross Site Scripting)

JB Library, 2.1.5 and below, XSS Cross Site Scripting...

UWA 2.1.5 /core/lib/core/App.class.php 信息泄漏漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '1768' vul ID version = '1' author = '王畅' vulDate = '2014-12-16' createDate =...

VLC Media Player 'audio.c' Heap Buffer Overflow Vulnerability

VLC Media Player is an excellent player. A heap buffer overflow vulnerability exists in the transcode module of VLC media player versions prior to 2.1.5. An attacker can exploit this vulnerability to hijack program execution and execute arbitrary code...