PT-2021-4477 · Unknown · Vpn-User-Portal

Name of the Vulnerable Software and Affected Versions: vpn-user-portal versions prior to 2.3.14 Description: The issue arises from insufficient input validation in the vpn-user-portal software, allowing remote authenticated users to obtain OS filesystem access due to the interaction of QR codes...

Dovecot 2.3.11 - 2.3.14 Path Traversal Vulnerability

Dovecot is prone to a path traversal vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2020-14293 · Nette +1 · Nette +1

Name of the Vulnerable Software and Affected Versions: Nette versions prior to 2.0.19 Nette versions prior to 2.1.13 Nette versions prior to 2.2.10 Nette versions prior to 2.3.14 Nette versions prior to 2.4.16 Nette versions prior to 3.0.6 Description: The issue allows for a code injection attack...

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files...

PT-2020-1329

Name of the Vulnerable Software and Affected Versions Eclipse Mojarra versions prior to 2.3.14 Oracle WebLogic Server affected versions not specified Description The issue allows attackers to read arbitrary files or affect the system via the HTTP protocol. It is related to a lack of protection fo...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.14 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.14 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

talkback 2.3.14 Multiple Vulnerabilities

No description provided by source. JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment + talkback/comments.php?edit=1&editid=2&...

struts 2.3.14 includeParams 命令执行漏洞

Apache Struts框架是一个基于Java Servlets,JavaBeans和JavaServer PagesJSP的Web应用框架的开源项目,Struts基于Model-View-ControllerMVC的设计模式,可以用来构件复杂的Web应用.Apache Struts 2.3.14标签库中的url标签和a标签的includeParams这个属性，代表显示请求访问参数的含义，一旦它的值被赋予ALL或者GET或者POST，就会显示具体请求参数内容。可利用此进行命令执行攻击 struts 2.3.14...

Apache Server 2.3.14 Denial of Service (DDOS) Vulnerability exploit

Apache Server 2.3.14 Denial of Service DDOS Vulnerability exploit Latest version of Apache Server 2.3.14 fails.The Egyptian Hacker and Exploit writer "Xen0n" discovered this Vulnerability and Develop an perl exploit for DDOS Vulnerability. The Exploit is available on Inj3ct0r's Website...

Debian Security Advisory DSA 2301-1 (rails)

The remote host is missing an update to rails announced via advisory DSA 2301-1. OpenVAS Vulnerability Test $Id: deb23011.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2301-1 rails Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Cyrus IMAP Server SIEVE Script Handling Buffer Overflow Vulnerability

Cyrus IMAP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cyrus:imap";...

Design/Logic Flaw

TalkBack 2.3.14 does not properly restrict access to the edit comment feature comments.php, which allows remote attackers to modify comments...

CVE-2009-4874

TalkBack 2.3.14 does not properly restrict access to the edit comment feature comments.php, which allows remote attackers to modify comments...

Design/Logic Flaw

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter...

Mandrake Security Advisory MDVSA-2009:229 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory MDVSA-2009:229. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

TalkBack 2.3.14 Execution / Local File Inclusion

JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment + talkback/comments.php?edit=1&editid=2& Command +...