544 matches found
TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07040)
The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...
Bludit cross-site scripting vulnerability (CNVD-2018-19087)
Bludit is an open source and free lightweight blogging CMS content management system system. A cross-site scripting vulnerability exists in Bludit version 2.3.4, which can be exploited by remote attackers to execute JavaScript code with the help of a user name...
CVE-2018-16313
Bludit 2.3.4 allows XSS via a user name...
CVE-2018-16313
Bludit 2.3.4 allows XSS via a user name...
CVE-2018-16313
Bludit 2.3.4 allows XSS via a user name...
CVE-2018-16313
CVE-2018-16313 affects Bludit 2.3.4 and enables cross-site scripting via a user name. The connected CNVD entry notes a remote XSS vulnerability in Bludit 2.3.4 that allows execution of JavaScript in the affected user’s browser, implying exploitation would occur through crafted user-name input. No...
Debian: Security Advisory (DLA-1367-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service daemon crash by sending exactly 11 bytes...
Elastic Logstash 'CVE-2016-1000221' Information Disclosure Vulnerability
Elastic Logstash is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-3618
Cross-site scripting XSS vulnerability in Nagios Business Process Intelligence BPI before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving index.php...
pfSense < 2.3.4-p1 Multiple Vulnerabilities (SA-17_05 / SA-17_06)
According to its self-reported version number, the remote pfSense install is prior to 2.3.4-p1. It is, therefore, affected by multiple vulnerabilities as stated in the referenced vendor advisories. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106505;...
Debian: Security Advisory (DLA-921-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Events <= 2.3.4 - Authenticated SQL Injection
Type user access: administrator user. $GET‘editevent’ is not escaped. File / Code: Path Request: /wp-content/plugins/wp-events/wp-events.php Line : 450 – 468 if isset $GET'editevent' $eventeditid = escattr $GET'editevent' ; ... $editevent = $wpdb-getrow "SELECT FROM $wpdb-prefixevents WHERE id =...
Events <= 2.3.4 - Authenticated SQL Injection
Type user access: administrator user. $GET‘editevent’ is not escaped. File / Code: Path Request: /wp-content/plugins/wp-events/wp-events.php Line : 450 – 468 if isset $GET'editevent' $eventeditid = escattr $GET'editevent' ; ... $editevent = $wpdb-getrow "SELECT FROM $wpdb-prefixevents WHERE id =...
Null pointer dereference
Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is...
CVE-2015-1555
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...
[SECURITY] [DSA 3900-1] openvpn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3900-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 27, 2017 https://www.debian.org/security/faq -...
Authorization
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...
CVE-2016-1000221
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...
Logstash Logs Sensitive Information
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...