AZL-43813 CVE-2015-2158 affecting package openjpeg2 2.3.1-12

Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...

Apache Struts Path Traversal Vulnerability (S2-042) - Linux

Apache Struts is prone to a path traversal vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

AZL-44508 CVE-2017-9937 affecting package openjpeg2 2.3.1-12

In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack...

Vanilla Forums Password Reset Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . A security vulnerability exists in the from method of the library/core/class.email.php file in versions of Vanilla Forums prior to 2.3.1. A remote attacker can exploit this vulnerability by using a specially...

PT-2017-17844 · Mantisbt · Mantisbt

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.3.1 Description: The issue allows for arbitrary password reset and unauthenticated admin access. This is achieved by providing an empty confirm hash value to the "verify.php" endpoint. Recommendations: For version...

AZL-44601 CVE-2016-10165 affecting package openjpeg2 2.3.1-12

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

AZL-45150 CVE-2017-5563 affecting package openjpeg2 2.3.1-12

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

shopify-scripts: SIGSEV on mrb_ary_splice

Sample The following code causes a SIGSEV when executed under the sandbox t0me=methods t0me0,0=t0me Crash Here we can see the crash full crash output attached $ bin/sandbox /tmp/mrbarysplice-crash.rb bin/sandbox:21: BUG Segmentation fault at 0x00005200000004 ruby 2.3.1p112 2016-04-26...

WordPress 404 To 301 2.2.8 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin ------------------------------------------------------------------------ Alyssa Milburn , July 2016...

WordPress 404 to 301 Plugin 2.2.8 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityin404to301wordpressplugin.html Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin Abstract A stored Cross-Site Scripting vulnerability was fou...

WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting

WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityin404to301wordpressplugin.html Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin Abstract A stored Cross-Site Scripting...

Ruby OpenSSL Library Security Bypass Vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by Japanese software developer Yukihiro Matsumoto , Ruby OpenSSL Library is one of the open source able to implement the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols of the...

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker ca...

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicious JavaScript code into the application, which will...

WordPress Activity Log 2.3.1 Persistent Cross Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicious JavaScript code into the application, which will...

WordPress Activity Log 2.3.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicio...

WordPress Activity Log Plugin 2.3.1 - Persistent XSS

Because of this vulnerability, an attacker can inject malicious JavaScript code in to the application. Solution Upgrade the WordPress plugin to the newer stable and safe version...

Fedora 22 : qemu-2.3.1-13.fc22 (2016-bfaf6a133b)

CVE-2016-2538: Integer overflow in usb module bz 1305815 CVE-2016-2841: ne2000: infinite loop bz 1304047 CVE-2016-2857: net: out of bounds read bz 1309564 CVE-2016-2392: usb: NULL pointer dereference bz 1307115 spice: fix spicechraddwatch crash bz 1315049 Note that Tenable Network Security has...

Apache Jetspeed User Manager Unauthorized Operation Vulnerability

Apache Jetspeed is the United States Apache Apache Software Foundation's use of Java and XML development of a set of open portal platforms and enterprise information portals. User Manager service is one of the user management services. An unauthorized operation vulnerability exists in the User...