294 matches found
CVE-2016-10567
product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about the status of a product, including live monitoring, statistics, endpoints, and test results into one place. product-monitor versions below 2.2.5 download...
CVE-2018-9234
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...
CMS Made Simple Cross-Site Request Forgery Vulnerability (CNVD-2018-07059)
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site request forgery vulnerability exists in the Admin profile page in CMS Made Simple 2.2.5. A remote attacker can exploit this vulnerability to cause a denial of...
CVE-2018-1000092
CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...
Cross site request forgery (csrf)
CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...
CVE-2018-1000092
CMS Made Simple 2.2.5 is affected by a CSRF vulnerability in the Admin profile page; attacker could trigger unauthorized actions via a specially crafted page. The issue appears fixed in 2.2.6. Public details consistently describe CSRF as the vulnerability class and mention potential denial-of-ser...
CMS Made Simple Remote Code Execution Vulnerability (CNVD-2018-06398)
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism , etc. File Manager is one of the file management component ....
CVE-2018-6580
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...
CVE-2018-6580
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...
Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload
Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload Exploit Title: Joomla! Component Jimtawl 2.2.5 - Arbitrary File Upload Dork: N/A Date: 01.02.2018 Vendor Homepage: http://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/streaming-a-broadcasting/jimtaw...
Joomla! Jimtawl 2.2.5 Shell Upload
Exploit Title: Joomla! Component Jimtawl 2.2.5 - Arbitrary File Upload Dork: N/A Date: 01.02.2018 Vendor Homepage: http://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/streaming-a-broadcasting/jimtawl/ Software Download:...
pfSense < 2.2.5 Multiple Vulnerabilities (SA-15_08)
According to its self-reported version number, the remote pfSense install is prior to 2.2.5. It is, therefore, affected by multiple vulnerabilities as stated in the referenced vendor advisories. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106497; scriptversion"1.7...
Design/Logic Flaw
CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
Unspecified Vulnerability in CMS Made Simple
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...
CVE-2017-17735
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in cookies...
Information disclosure
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in cookies...
CVE-2017-17734
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in sessions...
Fedora 25 : gd (2017-a69b0bb52d)
Version 2.2.5 - 2017-08-30 - Security - Double-free in gdImagePngPtr. CVE-2017-6362 - Buffer over-read into uninitialized memory. CVE-2017-7890 - Fixed - Fix 109: XBM reading fails with printed error - Fix 338: Fatal and normal libjpeg/ibpng errors not distinguishable - Fix 357: 2.2.4: Segfault i...