CVE-2019-9208

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences...

Wireshark Security Updates (wnpa-sec-2019-06, wnpa-sec-2019-07, wnpa-sec-2019-08) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

openSUSE Security Update : wireshark (openSUSE-2019-92)

This update for wireshark to version 2.4.12 fixes the following issues : Security issues fixed : - CVE-2019-5717: Fixed a denial of service in the PMUL dissector bsc1121232 - CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors bsc1121233 - CVE-2019-5719: Fixed a...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2019:0092-1 Rating: moderate References: 1121232 1121233 1121234 1121235 Cross-References: CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 Affected Products: openSUSE Leap 15.0 An update that fixes four...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:0138-1)

This update for wireshark to version 2.4.12 fixes the following issues : Security issues fixed : CVE-2019-5717: Fixed a denial of service in the PMUL dissector bsc1121232 CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors bsc1121233 CVE-2019-5719: Fixed a denial o...

Wireshark 2.4.x < 2.4.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.12 advisory. - In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in...

Wireshark Security Updates (wnpa-sec-2019-05) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark Security Updates (wnpa-sec-2019-02, wnpa-sec-2019-03, wnpa-sec-2019-04) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2019-5718

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a gett61string length check...

my little forum Cross-Site Request Forgery Vulnerability

my little forum is a set of Internet forum applications based on PHP and MySQL. The application uses a traditional tree view to display information and supports image uploading, template engine, BB code and emoticons. A cross-site request forgery vulnerability exists in my little forum version...

PT-2018-13094 · My Little Forum · My Little Forum

Name of the Vulnerable Software and Affected Versions: my little forum version 2.4.12 Description: The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to the deletion of users. Recommendations: For my little forum version 2.4.12, update to a newer version that contains a...

Design/Logic Flaw

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...

Cross site scripting

The Add page option in my little forum 2.4.12 allows XSS via the Title field...

CVE-2018-14936

The CVE-2018-14936 entry relates to my little forum version 2.4.12, where the Add page’s Title field is vulnerable to cross-site scripting (XSS). The underlying issue is lack of proper sanitization/input validation in the Title field, allowing attacker-controlled scripts to execute in a user’s br...

PT-2018-12811 · My Little Forum · My Little Forum

Name of the Vulnerable Software and Affected Versions: my little forum version 2.4.12 Description: The issue allows for XSS via the Title field in the Add page option. Recommendations: For my little forum version 2.4.12, update to a version that fixes this issue, if available. As a temporary...

Apache HTTP Server 'mod_auth_digest' DoS Vulnerability - Windows

Apache HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress WooCommerce 2.4.12 远程命令执行漏洞

利用代码为： /produits/?itemsperpage=%24%7b%40printmd5ablyassine%7d&setListingType=grid...

httpd24-httpd security update

2.4.12-6.0.1.el7.1 - replace index.html with Oracles index page oracleindex.html - update vstring in specfile 2.4.12-6.1 - core: fix chunk header parsing defect CVE-2015-3183 - core: replace of apsomeauthrequired with apsomeauthnrequired and apforceauthn hook CVE-2015-3185 - core: fix pointer...

Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Windows

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Linux

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...