WordPress Autoptimize plugin <= 2.7.7 - Race Condition leading to Remote Code Execution (RCE) vulnerability

Race Condition leading to Remote Code Execution RCE vulnerability discovered by Marcin Węgłowski in WordPress Autoptimize plugin versions = 2.7.7. Solution Update the WordPress Autoptimize plugin to the latest available version at least 2.7.8...

Autoptimize < 2.7.8 - Race Condition leading to RCE

The plugin attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in between the moment the file is extracted on the disk but not yet removed. It ...

WordPress Autoptimize plugin <= 2.7.7 - Arbitrary File Upload via "Import Settings" vulnerability

Arbitrary File Upload via "Import Settings" vulnerability discovered by Marcin Węgłowski in WordPress Autoptimize plugin versions = 2.7.7. Solution Update the WordPress Autoptimize plugin to the latest available version at least 2.7.8...

CVE-2019-12944

Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable...

CVE-2019-12944

Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable...

CVE-2019-12944

Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable...

GHSA-74VQ-H4Q8-X6JV Ansible Path Traversal vulnerability

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

Security update for ansible (moderate)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2019:1125-1 Rating: moderate References: 1099808 1102126 1109957 1112959 1116587 1118896 1126503 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2018-16859 CVE-2018-16876 CVE-2019-3828 Affected Products: SUSE...

PYSEC-2019-5

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

GHSA-7C2R-3JQF-C9RW jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

VLC Media Player iOS App 2.7.8 File Disclosure Vulnerability

VLC Media Player iOS application version 2.7.8 suffers from a file disclosure vulnerability. title: Local File Disclosure product: VLC media player iOS app vulnerable version: 2.7.8 fixed version: 2.8.1 CVE number: - impact: Medium homepage:...

DEBIAN-CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

Amazon Linux: Security Advisory (ALAS-2014-440)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIGACE 2.7.8 Cross Site Scripting / File Upload

| Title : BIGACE 2.7.8 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by BIGACE 2.7.8. Login | Tested on: windows 8.1 Français V.Pro | Download : http://www.bigace.de/ ======================================= FCKeditor Upload :...

Moodle Sealed User Login Vulnerability

Moodle is an open source web-based teaching and learning application. Versions of Moodle prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 have a security vulnerability when self-registration is enabled, which allows blocked users to bypass restrictions on logging into the application...

Moodle Sensitive Course Structure Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9, which allows remote attackers to exploit the vulnerability to view course structure information...

Moodle site-wide event monitoring rule subscription vulnerability

Moodle is an open source web-based teaching and learning application. Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 suffer from a security vulnerability in the site-wide rules in the event monitoring tool that allows remote, authenticated attackers to subscribe to event monitoring rules...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities in the rxvt-2.7.8 package of the Red Hat Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Fedora 21 : python-2.7.8-8.fc21 (2015-6003)

Security fix for CVE-2013-1752 multiple unbound readline DoS flaws in python stdlib following fixes which all relates to this CVE are in this patch : - poplib: limit maximum line length that we read from the network 16041 - smtplib: limit amount read from the network 16042 Note that Tenable Netwo...

Mandriva Linux Security Advisory : python (MDVSA-2014:197)

Updated python packages fix security vulnerability : Python before 2.7.8 is vulnerable to an integer overflow in the buffer type CVE-2014-7185. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security...