20944 matches found
Joomla Component com_phocadocumentation Remote SQL Injection (CVE-2009-0702)
An SQL injection vulnerability has been reported in Phoca Com Phocadocumentation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
XOOPS Module Qas codigo SQL Injection (CVE-2009-4714)
An SQL injection vulnerability has been reported in Alexandre Amaral Xoops Celepar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_gcalendar Remote SQL Injection (CVE-2009-4099)
An SQL injection vulnerability has been reported in G4j.laoneo Com Gcalendar. An attacker could exploit this vulnerability via the gcid parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_digifolio SQL Injection (CVE-2009-3193)
An SQL injection vulnerability has been reported in Joomla Com Digifolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_jsjobs SQL Injection (CVE-2009-4599)
An SQL injection vulnerability has been reported in Joomshark Com Jsjobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_simple_review Injection SQL Injection (CVE-2009-0706)
An SQL injection vulnerability has been reported in Simple-review Com Simple Review. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_seminar SQL Injection (CVE-2009-4200)
An SQL injection vulnerability has been reported in Vollmar Com Seminar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_mojo Remote File Include (CVE-2009-4789)
A code execution vulnerability has been reported in Mojoblog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
There exists a Stack-based buffer overflow in Foxit Reader, which allows remote attackers to execute arbitrary code via a long relative path or absolute path in the filename argument in an action...
RHEL 6 : Virtualization Manager (RHSA-2012:1537)
An updated jasperreports-server-pro package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
RHEL 5 : php (RHSA-2014:0312)
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 and 5.6 Long Life, and Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability...
F5 Networks BIG-IP : OpenSSH vulnerability (SOL15156)
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...
F5 Networks BIG-IP : icclib vulnerabilities (SOL9990)
Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript's International Color Consortium Format library icclib. Using specially crafted ICC profiles, an attacker could create a malicious...
F5 Networks BIG-IP : BIND vulnerability (SOL10366)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10366. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : SSL Renegotiation vulnerability (SOL10737)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10737. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : BIND 9 vulnerability (SOL9754)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9754. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : DNSSEC BIND vulnerability (SOL10898)
Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks via additional sections in ...
SOL15663 - MD2 Message-Digest Algorithm vulnerability CVE-2009-2409
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
CVE-2009-3542
creationtimestamp| type| source ---|---|--- 2014-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34747...
CVE-2014-2009
The CVE-2014-2009 entry concerns the mPAY24 payment module for PrestaShop prior to version 1.6. A vulnerability allows remote attackers to obtain credentials, installation path, and other sensitive information via a direct request to api/curllog.log. This is described as an information-disclosure...