821 matches found
CVE-2016-2555
SQL injection vulnerability in include/lib/mysqlconnect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php...
CVE-2016-2555
ATutor 2.2.1 contains a SQL Injection vulnerability in include/lib/mysql_connect.inc.php. The flaw allows remote attackers to execute arbitrary SQL commands through the searchFriends function in friends.inc.php, as detailed in exploit paths (e.g., Exploit-DB entry 39514) and related Metasploit mo...
PT-2018-5101
Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.1.4 Ansible versions prior to 2.2.1 Description The issue is related to improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed b...
MantisBT 'view_filters_page.php' Cross-Site Scripting Vulnerability
MantisBT is the MantisBT team of a Web-based open source defect tracking system . A cross-site scripting vulnerability exists in MantisBT 'viewfilterspage.php'. On the viewfilterspage.php page in MantisBT before 2.2.1, a remote attacker can inject arbitrary JavaScript via the 'viewtype' parameter...
MantisBT 2.x < 2.2.1 XSS Vulnerability - Linux
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
MantisBT < 1.3.7, 2.x < 2.2.1 XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2017-6799
A cross-site scripting XSS vulnerability in viewfilterspage.php in MantisBT before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'viewtype' parameter...
Wireshark DTN Parser Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the DTN parser in Wireshark versions 2.2.0...
Wireshark AllJoyn Parser Cache Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the AllJoyn parser in Wireshark versions 2.2...
CVE-2016-9376
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflowv5.c by ensuring that certain length values were sufficiently large...
Pagure Cross-Site Scripting Vulnerability
Pagure is a Git repository using Python to provide Web services . A cross-site scripting vulnerability exists in Pagure version 2.2.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
Default credentials
Pagure 2.2.1 XSS in raw file endpoint...
CVE-2016-1000007
Pagure 2.2.1 XSS in raw file endpoint...
CVE-2016-1000007
Pagure 2.2.1 XSS in raw file endpoint...
VLC Media Player Buffer Overflow Vulnerability (CNVD-2016-08689)
VLC Media Player is a very easy-to-use media player that supports a wide range of audio-video formats. A heap buffer overflow vulnerability exists in VLC media player versions prior to 2.2.1. A malicious attacker can exploit this vulnerability to hijack program execution and execute arbitrary cod...
[SECURITY] Fedora 24 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc24
Provides rendering drivers for MIME data...
[SECURITY] Fedora 25 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc25
Provides rendering drivers for MIME data...
Apache Ambari < 2.2.1 Arbitrary File Read Vulnerability
Apache Ambari is prone to an arbitrary file read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:ambari";...
