101 matches found
PT-2020-6326 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to a stored cross-site scripting vulnerability. Successful...
PT-2020-20732 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue allows for a security mitigation bypass, which could lead to arbitrary co...
PT-2020-6324 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento Commerc...
PT-2020-6325 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento platfor...
PT-2020-6278 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to an authorization bypass, which could allow a remote attacke...
PT-2020-6328 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento version 1.14.4.4 and earlier Magento version 1.9.4.4 and earlier Description: The issue is related to insufficient access control, which could allow a remote...
Django 1.11.x < 1.11.29, 2.2.x < 2.2.11, 3.0.x < 3.0.4 SQL Injection Vulnerability - Linux
Django is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if...
CVE-2019-17629
CMS Made Simple CMSMS 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager upload images" screen...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-13525)
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple 2.2.11, which can be exploited to conduct cross-site scripting attacks via the Admin Module Manager Search Term...
CVE-2019-17226
CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...
[SECURITY] Fedora 31 Update: sphinx-2.2.11-13.fc31
Sphinx is a full-text search engine, distributed under GPL version 2. Commercial licensing e.g. for embedded use is also available upon request. Generally, it's a standalone search engine, meant to provide fast, size-efficient and relevant full-text search functions to other applications. Sphinx...
Cisco Meeting Server Remote Code Execution Vulnerability
Cisco Meeting Server CMS Acano X-series is a conferencing server from Cisco, U.S.A. Cisco Meeting Server CMS Software is a videoconferencing system that runs on it. A misconfiguration vulnerability exists in CMS Software versions prior to 2.2.11 on the CMS Acano X-series platform. A remote attack...
CVE-2018-0262
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to Remote Code Execution. The vulnerability is due to incorrect default configuration of the device, which...
Wireshark Security Updates (wnpa-sec-2018-02) - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark IxVeriWave file parser denial of service vulnerability
Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of this software is to intercept network packets and display detailed data for analysis.IxVeriWave file parser is one of the IxVeriWave file parsers. A denial of service...
CVE-2018-5336
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth...
Wireshark 'File_read_line' Function Denial of Service Vulnerability - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Buffer overflow
The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...
openSUSE Security Update : wireshark (openSUSE-2017-1337)
This update for wireshark to version 2.2.11 fixes the following issues : Minor vulnerabilities that could be used to trigger dissector crashes by making Wireshark read specially crafted packages from the network or capture files boo1070727 : - CVE-2017-17084: IWARPMPA dissector crash...
